apiVersion: v1
kind: Secret
metadata:
  name: nifcloud-secret
  namespace: cert-manager
type: Opaque
data:
  access-key-id: <base64 encoded access key id>
  secret-access-key: <base64 encoded secret access key>

---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: nifcloud-issuer
  namespace: cert-manager
spec:
  acme:
    email: <your email address>
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: nifcloud-issuer-account-key
    solvers:
      - dns01:
          webhook:
            groupName: nifcloud.com
            solverName: nifcloud-solver
            config:
              accessKeyIdSecretRef:
                name: nifcloud-secret
                key: access-key-id
              secretAccessKeySecretRef:
                name: nifcloud-secret
                key: secret-access-key