--- apiVersion: v1 kind: Secret metadata: name: route53-credentials-secret stringData: access-key-id: xxxxxxx secret-access-key: xxxxxxx --- apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: letsencrypt spec: acme: email: foo@example.com server: https://acme-v02.api.letsencrypt.org/directory privateKeySecretRef: name: letsencrypt-account-key solvers: - selector: dnsZones: - "example.org" dns01: route53: region: eu-central-1 accessKeyIDSecretRef: name: route53-credentials-secret key: access-key-id secretAccessKeySecretRef: name: route53-credentials-secret key: secret-access-key