diff --git a/kube/kube.libsonnet b/kube/kube.libsonnet
index 7e69720..f9615c0 100644
--- a/kube/kube.libsonnet
+++ b/kube/kube.libsonnet
@@ -3,13 +3,13 @@
 local kube = import "kube.upstream.libsonnet";
 
 kube {
-    ClusterIssuer(name): kube._Object("certmanager.k8s.io/v1alpha1", "ClusterIssuer", name) {
+    ClusterIssuer(name): kube._Object("cert-manager.io/v1", "ClusterIssuer", name) {
         spec: error "spec must be defined",
     },
-    Issuer(name): kube._Object("certmanager.k8s.io/v1alpha1", "Issuer", name) {
+    Issuer(name): kube._Object("cert-manager.io/v1", "Issuer", name) {
         spec: error "spec must be defined",
     },
-    Certificate(name): kube._Object("certmanager.k8s.io/v1alpha1", "Certificate", name) {
+    Certificate(name): kube._Object("cert-manager.io/v1", "Certificate", name) {
         spec: error "spec must be defined",
     },
     # For use in PodSpec.volumes_
diff --git a/kube/mirko.libsonnet b/kube/mirko.libsonnet
index 5203afd..4f7d501 100644
--- a/kube/mirko.libsonnet
+++ b/kube/mirko.libsonnet
@@ -55,7 +55,7 @@
                 },
                 annotations+: {
                     "kubernetes.io/tls-acme": "true",
-                    "certmanager.k8s.io/cluster-issuer": "letsencrypt-prod",
+                    "cert-manager.io/cluster-issuer": "letsencrypt-prod",
                     [if env.ingressServerSnippet != null then "nginx.ingress.kubernetes.io/server-snippet"]: env.ingressServerSnippet,
                     [if std.length(env.extraHeaders) > 0 then "nginx.ingress.kubernetes.io/configuration-snippet"]:
                         std.join("\n", ["proxy_set_header %s;" % [h] for h in env.extraHeaders]),