<p>I am new to Kubernetes (GKE to be specific), this is my third week, so bare with me.</p>
<p>I've been tasked to expose a <code>statefulset</code> via <code>https</code> like this:</p>
<pre><code>- https://example.com/whateva -&gt; service:8080 (+Google Cloud CDN)
- https://example.com:5001    -&gt; service:9095
</code></pre>
<p>I have been trying for a week now. It was under the impression that this requirement was pretty straight forward? Can anyone point me in the right direction?</p>
<p>Questions:</p>
<ul>
<li>I would like to use the <code>managedcertificate</code> from the google cloud
but it seems that's not possible?</li>
<li>Which <code>ingress</code> implementation is capable of achieving this while providing understandable documentation?</li>
</ul>

<p>The <code>ingress</code> creates an L7/HTTP/HTTPS load balancer which can only forward HTTPS on tcp port 443.  The only load balancer that will forward port 5001 is the <a href="https://cloud.google.com/load-balancing/docs/choosing-load-balancer#summary-of-google-cloud-load-balancers" rel="nofollow noreferrer">Network TCP/UDP type</a>.  The network load balancers will not terminate ssl/tls so a <code>managedcertificate</code> can not be used.  The tls connection is passed through to pods in your cluster where the certificate and key must be present to handle the tls connections.</p>
