I'm facing a trouble that I need certs for my Keycloak inside k8s cluster to use nginx ingress. Which is the easiest way to add them? I started like this:

kubectl create secret tls tls-keycloak-ingress --cert=localtest.me.crt --key=localtest.me.pem

And then include them via secret in Chart yaml:

 ingress:
    enabled: true
    annotations:
      kubernetes.io/ingress.class: nginx
      nginx.ingress.kubernetes.io/use-regex: "true"
    path: /auth/?(.*)
    hosts:
      - keycloak.localtest.me
    tls:
      - hosts:
          - keycloak.localtest.me
        secretName: tls-keycloak-ingress

But should I create them on host machine? Or with kubectl somehow?