add self signed k8s certificate

traefik/base/003-certificates.yaml

@@ -25,6 +25,19 @@ spec:
     - 'mziesel.com'
     - '*.mziesel.com'
 ---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: k8s-mziesel-nl-self-signed-cert
+spec:
+  secretName: k8s-mziesel-nl-self-signed-cert-secret
+  issuerRef:
+    name: mziesel-ca-issuer
+    kind: ClusterIssuer
+  dnsNames:
+    - 'k8s.mziesel.nl'
+    - '*.k8s.mziesel.nl'
+---
 apiVersion: traefik.io/v1alpha1
 kind: TLSStore
 metadata:
@@ -33,3 +46,4 @@ spec:
   certificates:
     - secretName: mziesel-nl-wildcard-cert-secret
     - secretName: mziesel-com-wildcard-cert-secret
+    - secretName: k8s-mziesel-nl-self-signed-cert-secret