# Certificaat voor ns.labzand.com via Cloudflare DNS-01.
# Vereist: ClusterIssuer 'cloudflare-dns' (infrastructure/cert-manager/cloudflare-issuer.yaml)
# en een secret 'cloudflare-api-token' in namespace cert-manager.
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: ns-labzand
  namespace: external
spec:
  secretName: ns-labzand-tls
  dnsNames: ["ns.labzand.com"]
  issuerRef:
    name: cloudflare-dns
    kind: ClusterIssuer