TLS certificates not auto-generated for IngressRouterTCP

Traefik Traefik v2
1

Hi Traefik team,

I am trying to get an IngressRouterTCP to auto-generate an ACME cert so that I can connect via amqps (have tested and amqp works just fine but I get SSL: CERTIFICATE_VERIFY_FAILED when connecting via the secure protocol).

Below is my yaml for the IngressRouterTCP. Any light you can shed on what step I am missing is much appreciated.

kind: IngressRouteTCP
metadata:
  name: amqps
spec:
  entryPoints:
    - amqps
  routes:
  - match: HostSNI(`mysub.domain.com`)
    services:
    - name: rp-rabbitmq
      port: 5672
      terminationDelay: 400
  tls:
    {}
2

This will let Traefik create a custom cert, that external clients will not know and not be able to verify.

For a regular trusted TLS cert you need to use LetsEncrypt, in k8s usually cert-manager is used, see a tutorial like this one.