---
apiVersion: certmanager.k8s.io/v1alpha1
kind: ClusterIssuer
metadata:
  name: letsencrypt-production
spec:
  acme:
    email: admin@fedoraproject.org
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: letsencrypt-production-account-key
    solvers:
    - dns01:
        cnameStrategy: Follow
        route53:
          region: us-east-1
          accessKeyID: THEACCESSKEYID
          secretAccessKeySecretRef:
            namespace: cert-manager
            name: route53-access-key-secret
            key: access-key
          hostedZoneID: Z2MFECC8O90CBA
