--- apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: default-cluster-cert-issuer namespace: cert-manager spec: acme: email: info@k-space.ee server: https://acme-v02.api.letsencrypt.org/directory privateKeySecretRef: name: default-cluster-cert-issuer-accountKey # auto-generated by cert-manager solvers: - dns01: rfc2136: nameserver: 193.40.103.2 tsigKeyName: readwrite. tsigAlgorithm: HMACSHA512 tsigSecretSecretRef: name: tsig-secret key: TSIG_SECRET