Rook ingressroute for ceph-dash

Traefik Traefik v2
1

Hi Guys,

I'm trying to grasp my head around ingressroutes and rook ceph. I have ceph installed on k8s and running, problem is I can't figure out how to do a ingressroute to the dashboard service in rook-ceph, with cert-manager as a selfsigned cert. This is what I have so far:

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  namespace: default
  name: https-rook-ceph-dashboard
spec:
  selfsigned: {}
  entryPoints:
    - websecure
  routes:
    - match: Host(`ceph-dash.internal.djcminuz.com`) && (PathPrefix(`/`)
      kind: Rule
      services:
        - name: rook-ceph-mgr-dashboard
          port: 8443
  #tls:
  #    certResolver: letsenc
---
apiVersion: cert-manager.io/v1alpha2
kind: Issuer
metadata:
  name: ceph-selfsigned
  namespace: default
spec:
  selfSigned: {}
---
apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
  name: selfsigned-cert
  namespace: default
spec:
  dnsNames:
    - ceph-dash.internal.djcminuz.com
  secretName: selfsigned-cert-tls
  issuerRef:
    name: ceph-selfsigned

Can someone shed some light what I am doing wrong for me