Ndtyjky

I'm using Traefik with Kubernetes and want to deploy multiple sites with a letsencrypt wildcard cert. The logs show that the part of the requesting certificates seem to work fine, also the debug messages show that the cert should be used

time="2018-11-14T10:16:08Z" level=info msg="legolog: [INFO] [*.my-domain.com] Server responded with a certificate."

time="2018-11-14T10:16:08Z" level=debug msg="Certificates obtained for domains [*.my-domain.com]"

time="2018-11-14T10:16:08Z" level=debug msg="Configuration received from provider ACME: {}"

time="2018-11-14T10:16:08Z" level=debug msg="Wiring frontend dashboard.my-domain.com/ to entryPoint http"

time="2018-11-14T10:16:08Z" level=debug msg="Creating backend dashboard.my-domain.com/"

time="2018-11-14T10:16:08Z" level=debug msg="Adding TLSClientHeaders middleware for frontend dashboard.my-domain.com/"

time="2018-11-14T10:16:08Z" level=debug msg="Creating load-balancer wrr"

time="2018-11-14T10:16:08Z" level=debug msg="Creating server traefik-ingress-controller-84fbb59c4b-8h2p5 at http://MY-IP:8080 with weight 1"

time="2018-11-14T10:16:08Z" level=debug msg="Creating route / PathPrefix:/"

time="2018-11-14T10:16:08Z" level=debug msg="Creating route dashboard.my-domain.com Host:dashboard.my-domain.com"

time="2018-11-14T10:16:08Z" level=debug msg="Wiring frontend dashboard.my-domain.com/ to entryPoint https"

time="2018-11-14T10:16:08Z" level=debug msg="Creating backend dashboard.my-domain.com/"

time="2018-11-14T10:16:08Z" level=debug msg="Adding TLSClientHeaders middleware for frontend dashboard.my-domain.com/"

time="2018-11-14T10:16:08Z" level=debug msg="Creating load-balancer wrr"

time="2018-11-14T10:16:08Z" level=debug msg="Creating server traefik-ingress-controller-84fbb59c4b-8h2p5 at http://MY-IP:8080 with weight 1"

time="2018-11-14T10:16:08Z" level=debug msg="Creating route dashboard.my-domain.com Host:dashboard.my-domain.com"

time="2018-11-14T10:16:08Z" level=debug msg="Creating route / PathPrefix:/"

time="2018-11-14T10:16:08Z" level=debug msg="Add certificate for domains *.my-domain.com"

time="2018-11-14T10:16:08Z" level=info msg="Server configuration reloaded on :8080"

time="2018-11-14T10:16:08Z" level=info msg="Server configuration reloaded on :80"

time="2018-11-14T10:16:08Z" level=info msg="Server configuration reloaded on :443"

But as I open the website and change from i.e. http://dashboard.my-domain.com to https://dashboard.my-domain.com I get an error that there is no cert and it is "ERR_SSL_PROTOCOL_ERROR" in Chrome.

To provide some Context here are my yaml snippets:

apiVersion: v1

kind: Service

metadata:

  name: traefik-ingress-service

  namespace: traefik

spec:

  selector:

    k8s-app: traefik-ingress-lb

  ports:

    - protocol: TCP

      port: 80

      name: web

    - protocol: TCP

      port: 8080

      name: admin

  type: NodePort

---

apiVersion: v1

kind: Service

metadata:

  name: traefik-webui

  namespace: traefik

spec:

  selector:

    k8s-app: traefik-ingress-lb

  type: LoadBalancer

  ports:

  - name: web

    protocol: TCP

    port: 80

    targetPort: 8080

  - name: https

    protocol: TCP

    port: 443

    targetPort: 8080

  loadBalancerIP: MYEXTERNALIP

---

apiVersion: extensions/v1beta1

kind: Ingress

metadata:

  name: traefik-webui

  namespace: traefik

spec:

  rules:

  - host: dashboard.my-domain.com

    http:

      paths:

      - path: /

        backend:

          serviceName: traefik-webui

          servicePort: web

also my Configmap looks like this:

apiVersion: v1

kind: ConfigMap

metadata:

  namespace: traefik

  name: traefik-conf

data:

  traefik.toml: |

    defaultEntryPoints = ["http","https"]

    [entryPoints]

        [entryPoints.http]

          address = ":80"



        [entryPoints.http.redirect]

          entryPoint = "https"



        [entryPoints.https]

        address = ":443"

          [entryPoints.https.tls]

    [kubernetes]

    [web]

    [acme]

    email = "my-email@ddr.es"

    storage = "/config/acme.json"

    onDemand = true

    entryPoint = "https"

    acmeLogging = true

    caServer = "https://acme-staging-v02.api.letsencrypt.org/directory"

        [acme.dnsChallenge]

          provider = "MYPROVIDER"

    [[acme.domains]]

    main = "*.my-domain.com"

    logLevel = "DEBUG"