it’s not enough to have the cert sitting in the cluster you also need to tell the service using ingress that anyone who need to get to this service will be using the cert