How does ingressRoute in another namespace use 1 TLS secret in the traffic-proxy namespace?

Traefik Traefik v2 (latest)
, ,
1

Hello,

I installed version 2 traffic proxy, and I have 5 namespaces.
I created 1 TLS secret in 1 namespace (traefik-proxy namespace).
How does ingressRoute in another namespace use TLS secret in the traffic-proxy namespace?

Note: I currently use ingressRoute like this in another namespace, and autodetect using the TLS secret I've created in the traefik-proxy namespace, but I'm not sure that this ingressRoute can autodetect secret in other namespaces because there's no documentation.

# kubectl get secret -n traefik-proxy
NAME                                             TYPE                                  DATA   AGE
default-token-7gtd5                              kubernetes.io/service-account-token   3      13d
sh.helm.release.v1.traefik-external-release.v1   helm.sh/release.v1                    1      6d13h
sh.helm.release.v1.traefik-external-sit.v1       helm.sh/release.v1                    1      6d13h
sh.helm.release.v1.traefik-internal.v1           helm.sh/release.v1                    1      6d13h
traefik-dashboard-auth-secret                    Opaque                                1      6d14h
traefik-external-release-token-7lvf6             kubernetes.io/service-account-token   3      6d13h
traefik-external-sit-token-t4pd6                 kubernetes.io/service-account-token   3      6d13h
traefik-internal-token-b4zz2                     kubernetes.io/service-account-token   3      6d13h
wildcard-mydomain.com                             kubernetes.io/tls                     2      5d3h

# kubectl get ingressroute video-https -n tools -o yaml
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"traefik.containo.us/v1alpha1","kind":"IngressRoute","metadata":{"annotations":{"kubernetes.io/ingress.class":"traefik-external-release"},"creationTimestamp":"2021-09-16T03:26:38Z","generation":3,"managedFields":[{"apiVersion":"traefik.containo.us/v1alpha1","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:kubectl.kubernetes.io/last-applied-configuration":{}}},"f:spec":{".":{},"f:entryPoints":{},"f:routes":{},"f:tls":{".":{},"f:secretName":{}}}},"manager":"kubectl-client-side-apply","operation":"Update","time":"2021-09-16T03:26:38Z"}],"name":"video-https","namespace":"tools","selfLink":"/apis/traefik.containo.us/v1alpha1/namespaces/tools/ingressroutes/video-https","uid":"82f94f9e-c6d9-4bab-b9e4-a0ce03c80847"},"spec":{"entryPoints":["websecure"],"routes":[{"kind":"Rule","match":"Host(`video.mydomain.com`)","priority":10,"services":[{"name":"video","port":80}]}],"tls":{"secretName":"wildcard-mydomain.com"}}}
    kubernetes.io/ingress.class: traefik-external-release
  creationTimestamp: "2021-09-16T03:26:38Z"
  generation: 3
  name: video-https
  namespace: tools
  resourceVersion: "2154519"
  uid: 82f94f9e-c6d9-4bab-b9e4-a0ce03c80847
spec:
  entryPoints:
  - websecure
  routes:
  - kind: Rule
    match: Host(`video.mydomain.com`)
    priority: 10
    services:
    - name: video
      port: 80
  tls:
    secretName: wildcard-mydomain.com

Please help.