apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt
spec:
  acme:
    email: luca_lise@icloud.com
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: letsencrypt-account-key
    solvers:
      - dns01:
          route53:
            region: ca-central-1
            hostedZoneID: Z0948300LINP3SX1WI4O
            accessKeyID: AKIAYQOC475R6YBXHPE7
            secretAccessKeySecretRef:
              name: route53-credentials
              key: secret-access-key
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: wildcard-lucalise.ca
  namespace: kube-system
spec:
  secretName: wildcard-lucalise.ca-tls
  dnsNames:
    - "*.lucalise.ca"
  issuerRef:
    name: letsencrypt
    kind: ClusterIssuer