Odtnhj

I'm using Traefik with Kubernetes and want to deploy multiple sites with a letsencrypt wildcard cert. The logs show that the part of the requesting certificates seem to work fine, also the debug messages show that the cert should be used

time="2018-11-14T10:16:08Z" level=info msg="legolog: [INFO] [*.my-domain.com] Server responded with a certificate."
time="2018-11-14T10:16:08Z" level=debug msg="Certificates obtained for domains [*.my-domain.com]"
time="2018-11-14T10:16:08Z" level=debug msg="Configuration received from provider ACME: "
time="2018-11-14T10:16:08Z" level=debug msg="Wiring frontend dashboard.my-domain.com/ to entryPoint http"
time="2018-11-14T10:16:08Z" level=debug msg="Creating backend dashboard.my-domain.com/"
time="2018-11-14T10:16:08Z" level=debug msg="Adding TLSClientHeaders middleware for frontend dashboard.my-domain.com/"
time="2018-11-14T10:16:08Z" level=debug msg="Creating load-balancer wrr"
time="2018-11-14T10:16:08Z" level=debug msg="Creating server traefik-ingress-controller-84fbb59c4b-8h2p5 at http://MY-IP:8080 with weight 1"
time="2018-11-14T10:16:08Z" level=debug msg="Creating route / PathPrefix:/"
time="2018-11-14T10:16:08Z" level=debug msg="Creating route dashboard.my-domain.com Host:dashboard.my-domain.com"
time="2018-11-14T10:16:08Z" level=debug msg="Wiring frontend dashboard.my-domain.com/ to entryPoint https"
time="2018-11-14T10:16:08Z" level=debug msg="Creating backend dashboard.my-domain.com/"
time="2018-11-14T10:16:08Z" level=debug msg="Adding TLSClientHeaders middleware for frontend dashboard.my-domain.com/"
time="2018-11-14T10:16:08Z" level=debug msg="Creating load-balancer wrr"
time="2018-11-14T10:16:08Z" level=debug msg="Creating server traefik-ingress-controller-84fbb59c4b-8h2p5 at http://MY-IP:8080 with weight 1"
time="2018-11-14T10:16:08Z" level=debug msg="Creating route dashboard.my-domain.com Host:dashboard.my-domain.com"
time="2018-11-14T10:16:08Z" level=debug msg="Creating route / PathPrefix:/"
time="2018-11-14T10:16:08Z" level=debug msg="Add certificate for domains *.my-domain.com"
time="2018-11-14T10:16:08Z" level=info msg="Server configuration reloaded on :8080"
time="2018-11-14T10:16:08Z" level=info msg="Server configuration reloaded on :80"
time="2018-11-14T10:16:08Z" level=info msg="Server configuration reloaded on :443"

But as I open the website and change from i.e. http://dashboard.my-domain.com to https://dashboard.my-domain.com I get an error that there is no cert and it is "ERR_SSL_PROTOCOL_ERROR" in Chrome.

To provide some Context here are my yaml snippets:

apiVersion: v1
kind: Service
metadata:
 name: traefik-ingress-service
 namespace: traefik
spec:
 selector:
 k8s-app: traefik-ingress-lb
 ports:
 - protocol: TCP
 port: 80
 name: web
 - protocol: TCP
 port: 8080
 name: admin
 type: NodePort
---
apiVersion: v1
kind: Service
metadata:
 name: traefik-webui
 namespace: traefik
spec:
 selector:
 k8s-app: traefik-ingress-lb
 type: LoadBalancer
 ports:
 - name: web
 protocol: TCP
 port: 80
 targetPort: 8080
 - name: https
 protocol: TCP
 port: 443
 targetPort: 8080
 loadBalancerIP: MYEXTERNALIP
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
 name: traefik-webui
 namespace: traefik
spec:
 rules:
 - host: dashboard.my-domain.com
 http:
 paths:
 - path: /
 backend:
 serviceName: traefik-webui
 servicePort: web

also my Configmap looks like this:

apiVersion: v1
kind: ConfigMap
metadata:
 namespace: traefik
 name: traefik-conf
data:
 traefik.toml: |
 defaultEntryPoints = ["http","https"]
 [entryPoints]
 [entryPoints.http]
 address = ":80"

 [entryPoints.http.redirect]
 entryPoint = "https"

 [entryPoints.https]
 address = ":443"
 [entryPoints.https.tls]
 [kubernetes]
 [web]
 [acme]
 email = "my-email@ddr.es"
 storage = "/config/acme.json"
 onDemand = true
 entryPoint = "https"
 acmeLogging = true
 caServer = "https://acme-staging-v02.api.letsencrypt.org/directory"
 [acme.dnsChallenge]
 provider = "MYPROVIDER"
 [[acme.domains]]
 main = "*.my-domain.com"
 logLevel = "DEBUG"