apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: production-crt
spec:
  secret: production-crt
  issuer: letsencrypt-prod
  domains:
  - host: www.google.com
    acme:
      http-01:
        # if the ingress resource already exists, we modify it to add our path
        # instead of creating our own ingress resource (to support gce). if
        # this is blank, a temporary ingress resource will be used
        ingress: google-com
  - host: twitter.com
    acme:
      http-01:
        ingressClass: nginx
  - host: yahoo.com
    acme:
      dns-01:
        clouddns: {}
status:
  state: Pending