apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: clusterissuer
  namespace: cert-manager
spec:
  acme:
    email:
      valueFrom:
        secretKeyRef:
          name: clusterissuer-secrets
          namespace: cert-manager
          key: email
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: cluster-issuer-account-key
    solvers:
      - dns01:
          cloudflare:
            email:
              secretKeyRef:
                name: clusterissuer-secrets
                namespace: cert-manager
                key: email
            apiTokenSecretRef:
              name: clusterissuer-secrets
              namespace: cert-manager
              key: cloudflare_api_token
        selector:
          dnsNames:
            - secretKeyRef:
                name: clusterissuer-secrets
                namespace: cert-manager
                key: cluster_cert_domain
            - secretKeyRef:
                name: clusterissuer-secrets
                namespace: cert-manager
                key: cluster_cert_domain_wildcard