{
  kubernetes.resources.clusterIssuers.letsencrypt = {
    metadata.namespace = "kube-system";

    spec.acme = {
      server = "https://acme-v02.api.letsencrypt.org/directory";
      email = "pim@kunis.nl";
      privateKeySecretRef.name = "letsencrypt-private-key";
      solvers = [{
        selector = { };
        http01.ingress.class = "traefik";
      }];
    };
  };
}