Kubernetes/Ingress Nginx/Cert Manager certificates have namespaces?
The secret and the nginx ingress controller are in a different namespace, there is an option where you can set the certificate from another namespace.
https://github.com/kubernetes/ingress-nginx/blob/master/docs/user-guide/cli-arguments.md
--default-ssl-certificate string Name of the secret that contains a SSL certificate to be used as default for a HTTPS catch-all server. Takes the form <namespace>/<secret name>.To find the namespace of your secret:
kubectl describe secrets/monitoring-xxx-comUsing the default-ssl-certificate in the deployment template
spec: template: spec: containers: - args: - /nginx-ingress-controller - "--default-backend-service=$(POD_NAMESPACE)/default-http-backend" - "--default-ssl-certificate=$(POD_NAMESPACE)/tls-certificate"