Set `tls:` for ingresses

cert-manager needs you to set tls: variables in the ingress definitions, otherwise it won't get you the certificates.