apiVersion: traefik.io/v1alpha1
kind: TLSStore
metadata:
  name: default
  namespace: foo

spec:
  defaultCertificate:
    secretName: supersecret

---
apiVersion: v1
kind: Secret
metadata:
  name: supersecret
  namespace: foo

data:
  tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0=
  tls.key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCi0tLS0tRU5EIFBSSVZBVEUgS0VZLS0tLS0=

---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: test.route.default
  namespace: default

spec:
  entryPoints:
    - web

  routes:
  - match: Host(`foo.com`) && PathPrefix(`/bar`)
    kind: Rule
    priority: 12
    services:
    - name: whoami
      port: 80

  tls:
    store:
      name: default