---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: cloudflare-issuer
spec:
  acme:
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    email: abuse@mziesel.com

    # Name of a secret used to store the ACME account private key
    privateKeySecretRef:
      name: letsencrypt-staging-acme-key

    # ACME DNS-01 provider configurations
    solvers:
    # An empty 'selector' means that this solver matches all domains
    - selector: {}
        # dnsNames:
        # - mziesel.nl
        # - *.mziesel.nl
        # - mziesel.com
        # - *.mziesel.com
        # - mzsl.nl
        # - *.mzsl.nl
      dns01:
        cloudflare:
          email: mziesel@outlook.com
          # !! Remember to create a k8s secret before
          # kubectl create secret generic cloudflare-api-key-secret
          apiTokenSecretRef:
            name: cloudflare-api-token-secret
            key: api-token