traefik config help

[liyin37]

Environmental Info:
K3s Version:
k3s version v1.21.1+k3s1 (75dba57)
go version go1.16.4

Node(s) CPU architecture, OS, and Version:
Linux k3s 3.10.0-957.21.3.el7.x86_64 #1 SMP Tue Jun 18 16:35:19 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

Cluster Configuration:
only one server

Describe the bug:
when I config the ingressroute and tlsstore，the application I visit，the tls is not mine，it shows default traefik cert

Steps To Reproduce:
use below yaml to create it :

apiVersion: traefik.containo.us/v1alpha1
kind: TLSStore
metadata:
  name: apisix-tlsstore
spec:
  defaultCertificate:
    secretName: example-com
---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: redirect-apisix-https
spec:
  redirectScheme:
    scheme: https
    permanent: true
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: apisix 
spec:
  entryPoints:
    - web
  routes:
  - match: Host(`apisix.172.24.64.73.nip.io`)
    kind: Rule
    services:
    - name: apisix
      port: 9080
    middlewares: 
    - name: redirect-apisix-https
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: apisix-tls   
spec:
  entryPoints:
    - websecure
  routes:
  - match: Host(`apisix.172.24.64.73.nip.io`)
    kind: Rule
    services:
    - name: apisix
      port: 9080
tls:
  store:
    name: apisix-tlsstore

web visit it shows this

• Installed K3s:

Expected behavior:

Actual behavior:

Additional context / logs:

[ChristianCiach]

Your TLSStore must have name: default.

See https://doc.traefik.io/traefik/routing/providers/kubernetes-crd/#kind-tlsstore

Traefik currently only uses the TLS Store named "default".

[ChristianCiach]

Also, IngressRoute has no attribute tls: store: name:. Use tls: secretName: instead to reference a secret of type kubernetes.io/tls.

[liyin37]

@ChristianCiach
but when I dont use tlsstore, I create the tls secret from this cmd
kubectl create secret tls example-com --cert=./ssl/server.pem --key=./ssl/server.key

the yaml file is below:

apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: redirect-apisix-https
spec:
  redirectScheme:
    scheme: https
    permanent: true
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: apisix 
spec:
  entryPoints:
    - web
  routes:
  - match: Host(`apisix.172.24.64.73.nip.io`)
    kind: Rule
    services:
    - name: apisix
      port: 9080
    middlewares: 
    - name: redirect-apisix-https
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: apisix-tls   
spec:
  entryPoints:
    - websecure
  routes:
  - match: Host(`apisix.172.24.64.73.nip.io`)
    kind: Rule
    services:
    - name: apisix
      port: 9080
  tls:
    secretName: example-com

but the problem is the same,why, how can I write it ?