3-cert-manager-issuer.yaml

# Create both staging and prod issuers, allowing us to easily switch between
# them. (They only differ in metadata.name and spec.acme.server.)
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-staging
spec:
  acme:
    # Letsencrypt ACME server URL - STAGING
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    # Email address used for ACME registration
    email: webmaster@alqoqqonline.uk
    # Name of a secret used to store the ACME account private key
    privateKeySecretRef:
      name: letsencrypt-private-key
    solvers:
    - dns01:
        cloudflare:
          apiTokenSecretRef:
            name: cloudflare-api-token
            key: api-token
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod
spec:
  acme:
    # Letsencrypt ACME server URL - PROD
    server: https://acme-v02.api.letsencrypt.org/directory
    # Email address used for ACME registration
    email: webmaster@alqoqqonline.uk
    # Name of a secret used to store the ACME account private key
    privateKeySecretRef:
      name: letsencrypt-private-key
    solvers:
    - dns01:
        cloudflare:
          apiTokenSecretRef:
            name: cloudflare-api-token
            key: api-token