apiVersion: v1
kind: Secret
metadata:
  name: root-ca1
  namespace: foo

data:
  tls.ca: VEVTVFJPT1RDQVM=

---
apiVersion: v1
kind: Secret
metadata:
  name: root-ca2
  namespace: foo

data:
  tls.ca: VEVTVFJPT1RDQVMy

---
apiVersion: v1
kind: Secret
metadata:
  name: mtls1
  namespace: foo

data:
  tls.crt: VEVTVENFUlQx
  tls.key: VEVTVEtFWTE=

---
apiVersion: v1
kind: Secret
metadata:
  name: mtls2
  namespace: foo

data:
  tls.crt: VEVTVENFUlQy
  tls.key: VEVTVEtFWTI=

---
apiVersion: traefik.containo.us/v1alpha1
kind: ServersTransport
metadata:
  name: test
  namespace: foo

spec:
  serverName: "test"
  insecureSkipVerify: true
  maxIdleConnsPerHost: 42
  rootCAsSecrets:
  - root-ca1
  - root-ca2
  certificatesSecrets:
  - mtls1
  - mtls2
  forwardingTimeouts:
    dialTimeout: 42
    responseHeaderTimeout: 42s
    idleConnTimeout: 42ms