apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-staging
  namespace: cert-manager
spec:
  acme:
    email: simon.kaiser@gmx.net # replace this
    privateKeySecretRef:
      name: staging-issuer-account-key
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    solvers:
      - http01:
          ingress:
            class: traefik
            ingressTemplate:
              metadata:
                annotations:
                  "traefik.ingress.kubernetes.io/router.tls": "true"
                  "traefik.ingress.kubernetes.io/frontend-entry-points": "websecure"
        selector: {}