apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-issuer
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: david@dmwl.net
    privateKeySecretRef:
      name: letsencrypt-issuer
    solvers:
      - http01:
          ingress:
            ingressClassName: nginx
      - dns01:
          route53:
            region: us-east-1
            hostedZoneID: Z10070322U6TSCLWYTH55
            accessKeyIDSecretRef:
              name: aws-dns-iam
              key: access-key-id
            secretAccessKeySecretRef:
              name: aws-dns-iam
              key: secret-access-key