--- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: mziesel-nl-wildcard-cert spec: secretName: mziesel-nl-wildcard-cert-secret issuerRef: name: cloudflare-issuer kind: ClusterIssuer dnsNames: - mziesel.nl - *.mziesel.nl --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: mziesel-com-wildcard-cert spec: secretName: mziesel-com-wildcard-cert-secret issuerRef: name: cloudflare-issuer kind: ClusterIssuer dnsNames: - mziesel.com - *.mziesel.com --- apiVersion: traefik.io/v1alpha1 kind: TLSStore metadata: name: default spec: certificates: - secretName: mziesel-nl-wildcard-cert-secret - secretName: mziesel-com-wildcard-cert-secret