I think we can if we just use a “wildcard cert”. I honestly don’t understand what the benefit of using Vault is in this case, where we can just use a single wildcard cert and just shove that in a Traefik ingress load balancer and be done with it.