Sharing certificate between different namespaces

Traefik Traefik v2
,
1

Hi, we have different IngressRoute objects on different namespaces , but we use the same wildcard certificate for all those IngressRoutes.

Each IngressRoute has this at tls:

  tls:
    options:
      name: tls-options
    secretName: wildcard

Certificate object is getting issued on a namespace called staging.
So what we do right now is copy the created Secret from staging to all other namespaces that we need. But there are many downsides for this strategy.

Is there a better approach for auto provisioned certificates?

1 Like
2

Use the Gateway API, the certificate is defined in the Gateway and HTTPRoutes can be attached to the gateway sharing the certificate.

1 Like
3

I am asking similar (the same?) question in Documentation: clearly document Kubernetes Ingress Class namespaced tls certificate misconception · Issue #12116 · traefik/traefik · GitHub