apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: clusterissuer
  namespace: cert-manager
spec:
  acme:
    email: "edward@cheng.sydney"
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: cluster-issuer-account-key
    solvers:
      - dns01:
          cloudflare:
            email: "edward@cheng.sydney"
            apiTokenSecretRef:
              name: clusterissuer-secrets
              namespace: cert-manager
              key: cloudflare_api_token
        selector:
          dnsNames:
            - "cluster.edward.sydney"
            - "*.cluster.edward.sydney"