Kubernetes traefik permissions, how to give permissions to use a tls secret?

hello,
I am using traefik version 3.2.2.
I have a tls secret and I think it contains the tls certificate.
I was not understanding why traefik did not generate https but only http then I begun to inspect traefik permissions.

$kubectl describe serviceaccount traefik-account
Name:                traefik-account
Namespace:           default
Labels:              <none>
Annotations:         <none>
Image pull secrets:  <none>
Mountable secrets:   <none>
Tokens:              <none>
Events:              <none>

$ kubectl describe clusterrole traefik-role
Name:         traefik-role
Labels:       <none>
Annotations:  <none>
PolicyRule:
  Resources                           Non-Resource URLs  Resource Names  Verbs
  ---------                           -----------------  --------------  -----
  nodes                               []                 []              [get list watch]
  secrets                             []                 []              [get list watch]
  services                            []                 []              [get list watch]
  ingressclasses.extensions           []                 []              [get list watch]
  ingresses.extensions                []                 []              [get list watch]
  ingressclasses.networking.k8s.io    []                 []              [get list watch]
  ingresses.networking.k8s.io         []                 []              [get list watch]
  ingressroutes.traefik.io            []                 []              [get list watch]
  ingressroutetcps.traefik.io         []                 []              [get list watch]
  ingressrouteudps.traefik.io         []                 []              [get list watch]
  middlewares.traefik.io              []                 []              [get list watch]
  middlewaretcps.traefik.io           []                 []              [get list watch]
  serverstransports.traefik.io        []                 []              [get list watch]
  serverstransporttcps.traefik.io     []                 []              [get list watch]
  tlsoptions.traefik.io               []                 []              [get list watch]
  tlsstores.traefik.io                []                 []              [get list watch]
  traefikservices.traefik.io          []                 []              [get list watch]
  endpointslices.discovery.k8s.io     []                 []              [list watch]
  ingresses.extensions/status         []                 []              [update]
  ingresses.networking.k8s.io/status  []                 []              [update]

If I understand correctly it's missing something to see the certificate.
Or am I just wrong?