Traefik - Custom TLS certificate

Traefik Traefik v2
1

Hi,
I need your help with some Traefik config on kubernetes.

I deployed it with help with default settings in traefik namespace.
In Argument config i set this:

--global.checknewversion --global.sendanonymoususage --entrypoints.metrics.address=:9100/tcp --entrypoints.traefik.address=:9000/tcp --entrypoints.web.address=:8000/tcp --entrypoints.websecure.address=:8443/tcp --api.dashboard=true --ping=true --metrics.prometheus=true --metrics.prometheus.entrypoint=metrics --providers.kubernetescrd --providers.kubernetesingress --entrypoints.websecure.http.tls=true --entrypoints.web.http.redirections.entryPoint.to=websecure --entrypoints.web.http.redirections.entryPoint.scheme=https

Problem is to add my own wildcard certificate to Traefik.
I read documentation but don't understand it.
In normal Ingress controller it always create it TLS secret with default generated certificate which can be replaced with our own tro provide it for all ingressess.

Can anyone tell me how to configure it in traefik.

2

When using k8s, TLS is usually handled by cert manager. Example tutorial.

3

In my setup cert-manager is not handle the certificates, I have my k8s cluster on prem.
I already have generated wildcard certificate signed by our internal CA.
Only what I need is to add it as a default cert the same way like nginx ingress or haproxy ingress controller.
This certificate shoud work with all created and future ingresses

4

I added this to my config, traefik.yml so it is default on all sites

tls:
stores:
default:
defaultCertificate:
certFile: /etc/traefik/fullchain.cer
keyFile: /etc/traefik/night.pw.key
this way you can load your own from interal pki or none acme pkis

5

to use custom cert as default for traefik, you'll have to adjust the deployment, something similar to:

Just remember the behaviour described (as accepted solution):