certmanager v1.21.1

ClusterIssuer.spec.acme.solvers[].http01.ingress.ingressTemplate.spec.acme.solvers.dns01.rfc2136

Use RFC2136 ("Dynamic Updates in the Domain Name System") (https://datatracker.ietf.org/doc/rfc2136/) to manage DNS01 challenge records.

ClusterIssuer.spec.acme.solvers[].http01.ingress.ingressTemplate.spec.acme.solvers.dns01.rfc2136 fields and descriptions
Field / Type	Description
nameserver `string` required	The IP address or hostname of an authoritative DNS server supporting RFC2136 in the form host:port. If the host is an IPv6 address it must be enclosed in square brackets (e.g [2001:db8::1]); port is optional. This field is required.
protocol `string`	Protocol to use for dynamic DNS update queries. Valid values are (case-sensitive) ``TCP`` and ``UDP``; ``UDP`` (default). `enum: ["TCP","UDP"]`
tsigAlgorithm `string`	The TSIG Algorithm configured in the DNS supporting RFC2136. Used only when ``tsigSecretSecretRef`` and ``tsigKeyName`` are defined. Supported values are (case-insensitive): ``HMACMD5`` (default), ``HMACSHA1``, ``HMACSHA256`` or ``HMACSHA512``.
tsigKeyName `string`	The TSIG Key name configured in the DNS. If ``tsigSecretSecretRef`` is defined, this field is required.
tsigSecretSecretRef `object`	The name of the secret containing the TSIG value. If ``tsigKeyName`` is defined, this field is required.