---
apiVersion: v1
kind: Secret
metadata:
name: route53-credentials-secret
stringData:
access-key-id: xxxxxxx
secret-access-key: xxxxxxx
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt
spec:
acme:
email: foo@example.com
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
name: letsencrypt-account-key
solvers:
- selector:
dnsZones:
- "example.org"
dns01:
route53:
region: eu-central-1
accessKeyIDSecretRef:
name: route53-credentials-secret
key: access-key-id
secretAccessKeySecretRef:
name: route53-credentials-secret
key: secret-access-key