How to get high-availability HTTPS for all applications in a kubernetes cluster under one wildcard certificate, and deployed with FluxCD.