argocd-test/traefik/base/003-certificates.yaml

---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: mziesel-nl-wildcard-cert
spec:
  secretName: mziesel-nl-wildcard-cert-secret
  issuerRef:
    name: cloudflare-issuer
    kind: ClusterIssuer
  dnsNames:
    - 'mziesel.nl'
    - '*.mziesel.nl'
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: mziesel-com-wildcard-cert
spec:
  secretName: mziesel-com-wildcard-cert-secret
  issuerRef:
    name: cloudflare-issuer
    kind: ClusterIssuer
  dnsNames:
    - 'mziesel.com'
    - '*.mziesel.com'
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: k8s-mziesel-nl-self-signed-cert
spec:
  secretName: k8s-mziesel-nl-self-signed-cert-secret
  issuerRef:
    name: mziesel-ca-issuer
    kind: ClusterIssuer
  dnsNames:
    - 'k8s.mziesel.nl'
    - '*.k8s.mziesel.nl'
---
apiVersion: traefik.io/v1alpha1
kind: TLSStore
metadata:
  name: default
spec:
  certificates:
    - secretName: mziesel-nl-wildcard-cert-secret
    - secretName: mziesel-com-wildcard-cert-secret
    - secretName: k8s-mziesel-nl-self-signed-cert-secret