<p>I am using Traefik like a reverse proxy on my Kubernetes cluster and I'm looking a way to use multiple SSL Certificates.</p>
<p><a href="https://docs.traefik.io/routing/providers/kubernetes-crd/#kind-tlsstore" rel="nofollow noreferrer">According to the doc</a>, is not possible to use multiple TLSStore, I must use only the <code>default</code> store.</p>
<p>For example, I have two domains <code>app1.com</code> and <code>app2.com</code> and two certificates for <code>*.app1.com</code> and <code>*.app2.com</code> known by Traefik using secret <code>app1-com-ssl</code> and <code>app2-com-ssl</code>, is it possible to store these two certificates in the same default TLSStore?</p>
<p>Here my <strong>TLSStore</strong> definition:</p>
<pre class="lang-yaml prettyprint-override"><code>apiVersion: traefik.containo.us/v1alpha1
kind: TLSStore
metadata:
  name: default
  namespace: app1

spec:
  defaultCertificate:
    secretName:  app1-com-ssl
</code></pre>
<p>Here my <strong>IngressRoute</strong> for <code>app1</code>:</p>
<pre class="lang-yaml prettyprint-override"><code>apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: routes
  namespace: app1

spec:
  entryPoints:
    - websecure
    - web

  routes:
  - match: Host(`test.app1.com`)
    kind: Rule
    services:
    - name: test-service
      port: 8080
  tls:
    store:
      name: default
</code></pre>
<p>Here my <strong>IngressRoute</strong> for <code>app2</code>:</p>
<pre class="lang-yaml prettyprint-override"><code>apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: routes
  namespace: app2

spec:
  entryPoints:
    - websecure
    - web

  routes:
  - match: Host(`test.app2.com`)
    kind: Rule
    services:
    - name: test-service
      port: 8080
  tls:
    store:
      name: default
</code></pre>
<p>Thanks!</p>

<p>Good question. The TLSStore doesn't currently support multiple certificates it just supports a <em>'default certificate'</em>. And as you have already seen you can only specify a <em>'default'</em> TLSStore.</p>
<p>The Traefik configs do allow you to <a href="https://docs.traefik.io/https/tls/#certificates-stores" rel="nofollow noreferrer">specify multiple certificates</a> for the <em>'default'</em> TLSStore (But not the K8s CRD) I have opened a <a href="https://github.com/containous/traefik/issues/7210" rel="nofollow noreferrer">feature request</a> for the Traekik TLSStore CRD to add support for multiple certificates.</p>
<p>✌️</p>
