# Http works https not. Traefik and cert manager in kubernetes

**URL:** <https://community.traefik.io/t/http-works-https-not-traefik-and-cert-manager-in-kubernetes/25488>\
**Category:** Traefik v3 (latest)\
**Tags:** kubernetes-ingress\
**Created:** [December 10, 2024, 12:52pm UTC](https://community.traefik.io/t/http-works-https-not-traefik-and-cert-manager-in-kubernetes/25488 "2024-12-10T12:52:34Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![LearningNetrunner](https://avatars.discourse-cdn.com/v4/letter/l/eada6e/32.png) [@LearningNetrunner](https://community.traefik.io/u/LearningNetrunner)\
**Post date:** [December 10, 2024, 12:52pm UTC](https://community.traefik.io/t/http-works-https-not-traefik-and-cert-manager-in-kubernetes/25488/1 "2024-12-10T12:52:34Z")

</div>

Hello, I am using traefik 3.2.1 and cert manager v1.16.2 and following this article.

> **[Secure Web Apps: Traefik Proxy, cert-manager & Let’s Encrypt](https://traefik.io/blog/secure-web-applications-with-traefik-proxy-cert-manager-and-lets-encrypt/)**
>
> Let's dig into how you can use cert-manager to extend Traefik Proxy’s capabilities as a Kubernetes ingress controller to secure your web applications.

The strange behaviour I am facing is the following one:  
I can get to [http://application.domain.example](http://application.domain.example)  
but not to [https://application.domain.example](https://application.domain.example)  
Traefik is showing the service

 ![Schermata del 2024-12-10 13-42-21](https://us1.discourse-cdn.com/flex020/uploads/containo/original/2X/7/79e769411fb01a1f9d34b996105d3cb8036a0b64.png)  
The certificate is present in certificate manager.  
The article i was following does not mention any command to issue to traefik but I suspect I have to tell somewhere, in some yaml file, that traefik that must act as https for application.domain.example .  
Could you please point me out to doc or something else that can help.  
If I inspect Traefic pod logs I can see:

WRN No domain found in rule PathPrefix(`/`), the TLS options applied for this router will depend on the SNI of each request entryPointName=websecure routerName=websecure-default-app-ingress@kubernetes

Maybe that is the issue?

---

<div class="post-metadata">

**Author:** ![LearningNetrunner](https://avatars.discourse-cdn.com/v4/letter/l/eada6e/32.png) [@LearningNetrunner](https://community.traefik.io/u/LearningNetrunner)\
**Post date:** [December 11, 2024, 8:01am UTC](https://community.traefik.io/t/http-works-https-not-traefik-and-cert-manager-in-kubernetes/25488/3 "2024-12-11T08:01:31Z")

</div>

if I give kubectl logs "traefik-pod" i see a lot of errors like this one:

```auto
ERR Error while updating ingress status error="missing service: default/traefik" ingress=app-ingress namespace=default providerName=kubernetes
ERR Error while updating ingress status error="missing service: default/traefik" ingress=app-ssl-ingress namespace=default providerName=kubernetes

```

so maybe I have to make a traefik service in the default namespace? how would it be defined?

---

<div class="post-metadata">

**Author:** ![LearningNetrunner](https://avatars.discourse-cdn.com/v4/letter/l/eada6e/32.png) [@LearningNetrunner](https://community.traefik.io/u/LearningNetrunner)\
**Post date:** [December 11, 2024, 8:19am UTC](https://community.traefik.io/t/http-works-https-not-traefik-and-cert-manager-in-kubernetes/25488/4 "2024-12-11T08:19:22Z")

</div>

> [@LearningNetrunner](#):
>
> `Error while updating ingress status error="missing service:`

I did  
`helm upgrade traefik traefik/traefik `  
and the issue seem resolved now. I have other issues thoug. will update the post with solutions

```auto
WRN No domain found in rule PathPrefix(`/`), the TLS options applied for this router will depend on the SNI of each request entryPointName=websecure routerName=websecure-default-app-ingress@kubernetes

```

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [December 11, 2024, 8:48am UTC](https://community.traefik.io/t/http-works-https-not-traefik-and-cert-manager-in-kubernetes/25488/5 "2024-12-11T08:48:51Z")

</div>

This is just a warning. It shows up when a `router` rule does not include `Host()` or `HostSNI()`.

If you just use `PathPrefix()`, then Traefik doesn’t know which domain is associated with it. You need to make sure that the domain is named somewhere, when you want valid LetsEncrypt TLS certs for it.

But if you have the domain somewhere, like with `main`/`sans`, then it’s fine and will just work.

---

<div class="post-metadata">

**Author:** ![LearningNetrunner](https://avatars.discourse-cdn.com/v4/letter/l/eada6e/32.png) [@LearningNetrunner](https://community.traefik.io/u/LearningNetrunner)\
**Post date:** [December 13, 2024, 1:18pm UTC](https://community.traefik.io/t/http-works-https-not-traefik-and-cert-manager-in-kubernetes/25488/6 "2024-12-13T13:18:58Z")

</div>

hello @bluepuma77 thank you for your time and great content. I have attempted to explain my deployment and logic here: [Have I understood correctly how to protect a program in kubernetes with traefik?](https://community.traefik.io/t/have-i-understood-correctly-how-to-protect-a-program-in-kubernetes-with-traefik/25543) maybe you could assist me undertstand what am I doing wrong.