diff --git a/cluster/kube/cluster.libsonnet b/cluster/kube/cluster.libsonnet
index 8305033..0701305 100644
--- a/cluster/kube/cluster.libsonnet
+++ b/cluster/kube/cluster.libsonnet
@@ -127,7 +127,7 @@
                     verbs: ["*"],
                 },
                 {
-                    apiGroups: ["certmanager.k8s.io"],
+                    apiGroups: ["cert-manager.io/v1"],
                     resources: ["certificates"],
                     verbs: ["*"],
                 },
@@ -205,7 +205,9 @@
                     privateKeySecretRef: {
                         name: "letsencrypt-prod"
                     },
-                    http01: {},
+                    solvers: [
+                        { http01: { ingress: {} } },
+                    ]
                 },
             },
         },
diff --git a/cluster/kube/lib/registry.libsonnet b/cluster/kube/lib/registry.libsonnet
index 552d31b..d26d0fd 100644
--- a/cluster/kube/lib/registry.libsonnet
+++ b/cluster/kube/lib/registry.libsonnet
@@ -286,7 +286,7 @@
             metadata+: env.metadata("registry") {
                 annotations+: {
                     "kubernetes.io/tls-acme": "true",
-                    "certmanager.k8s.io/cluster-issuer": "letsencrypt-prod",
+                    "cert-manager.io/cluster-issuer": "letsencrypt-prod",
                     "nginx.ingress.kubernetes.io/backend-protocol": "HTTPS",
                     "nginx.ingress.kubernetes.io/proxy-body-size": "0",
                 },
diff --git a/cluster/kube/lib/rook.libsonnet b/cluster/kube/lib/rook.libsonnet
index 9a0f832..dba8234 100644
--- a/cluster/kube/lib/rook.libsonnet
+++ b/cluster/kube/lib/rook.libsonnet
@@ -757,7 +757,7 @@
             metadata+: cluster.metadata {
                 annotations+: {
                     "kubernetes.io/tls-acme": "true",
-                    "certmanager.k8s.io/cluster-issuer": "letsencrypt-prod",
+                    "cert-manager.io/cluster-issuer": "letsencrypt-prod",
                 },
             },
             spec+: {
@@ -1197,7 +1197,7 @@
             metadata+: zonegroup.realm.cluster.metadata {
                 annotations+: {
                     "kubernetes.io/tls-acme": "true",
-                    "certmanager.k8s.io/cluster-issuer": "letsencrypt-prod",
+                    "cert-manager.io/cluster-issuer": "letsencrypt-prod",
                     "nginx.ingress.kubernetes.io/proxy-body-size": "0",
                 },
             },