apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: zerossl
spec:
  acme:
    server: https://acme.zerossl.com/v2/DV90
    email: zerossl@dustinhatch.me
    externalAccountBinding:
      keyID: f06nxtk433oeVdcaDLp9Iw
      keySecretRef:
        name: zerossl-eab
        key: secret
    privateKeySecretRef:
      name: zerossl-prod

    solvers:
    - dns01:
        cnameStrategy: Follow
        rfc2136:
          nameserver: 172.30.0.1
          tsigKeyName: cert-manager
          tsigAlgorithm: HMACSHA512
          tsigSecretSecretRef:
            name: cert-manager-tsig
            key: cert-manager.key