---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: k8s-master@hexor.cy
    privateKeySecretRef:
      name: tls-secret
    solvers:
      - dns01:
          cloudflare:
            email: ultradesu@hexor.ru
            apiKeySecretRef:
              name: cloudflare-api-key-secret
              key: apiKey
        selector:
          dnsZones:
            - "*.hexor.cy"
            - "*.hexor.ru"
            - "*.btwiusearch.net"
            - "hexor.ru"
            - "hexor.cy"
            - "btwiusearch.net"
      - dns01:
          route53:
            region: eu-north-1
            accessKeyIDSecretRef:
              name: aws-api-key-secret
              key: accessKey
            secretAccessKeySecretRef:
              name: aws-api-key-secret
              key: secretKey
        selector:
          dnsZones:
            - "of.hexor.cy"