--- apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: default namespace: cert-manager spec: acme: email: info@k-space.ee server: https://acme-v02.api.letsencrypt.org/directory privateKeySecretRef: name: example-issuer-account-key solvers: - dns01: rfc2136: nameserver: 193.40.103.2 tsigKeyName: readwrite. tsigAlgorithm: HMACSHA512 tsigSecretSecretRef: name: tsig-secret key: TSIG_SECRET