Kubernetes install of trafik dashbard using cert that was created by cert-manager

Traefik Traefik v3 (latest)
, ,
1

I am having a difficult time getting the dashboard to be served up by a cert that cert-manager generates from my acme server private ca.

This is my values yaml

 service:
              enabled: true
              annotations:
                external-dns.alpha.kubernetes.io/hostname: traefik-dashboard.aidevelopment.lab
            
            api:
              dashboard: true
              insecure: false
                        
            ingressRoute:
              dashboard:
                enabled: true
                entryPoints: [websecure]
                match: Host('traefik-dashboard') 
            
            gateway:
              listeners:
                web:           # HTTP listener that matches entryPoint `web`
                  port: 80
                  protocol: HTTP
                  namespacePolicy:
                    from: All
            
                websecure:         # HTTPS listener that matches entryPoint `websecure`
                  port: 443
                  protocol: HTTPS  # TLS terminates inside Traefik
                  namespacePolicy:
                    from: All
                  mode: Terminate
                  certificateRefs:
                    - kind: Secret
                      name: traefik-dashboard-tls # the Secret we created before the installation
                      group: ""

this is my cert request.. and it completes just fine..

                apiVersion: cert-manager.io/v1
                kind: Certificate
                metadata:
                  name: traefik-dashboard-cert
                  namespace: traefik # or your Traefik namespace
                spec:
                  dnsNames:
                    - traefik-dashboard.aidevelopment.lab # Replace with your dashboard's hostname
                  secretName: traefik-dashboard-tls # Secret where the certificate will be stored
                  issuerRef:
                    name: dev-issuer # Reference your Issuer or ClusterIssuer
                    kind: ClusterIssuer

Thoughts anyone else able to get the dashboard running on TLS? dont know why this is hard.

i tried adding tls: secrets to the ingress:dashboard tag also and no go.. …

Thanks