Self-signed Root CA in Kubernetes with k3s, cert-manager and traefik