apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: lets-encrypt spec: acme: email: {{ .Values.global.domain.mail }} server: https://acme-v02.api.letsencrypt.org/directory privateKeySecretRef: # Secret resource that will be used to store the account's private key. name: lets-encrypt-private-key # Add a single challenge solver, HTTP01 using nginx solvers: - http01: ingress: class: public