Yup, that worked. I’m not sure why mine didn’t, since I copied the certificate configs directly from the docs, but yours seems to explicitly configure the ACME challenge, whereas the docs indicated that the config would be picked up from the issuer.
In any case, I’ve got HTTPS now, and like that the automatic redirect is automatically configured. That would have been my next question.
Should we move this thread to the Rancher 2.0 forum?