<p>I am running a restfull service behind self signed cert thru NGINX in google cloud kubernetes infrastructure.
Kubernetes service loader exposes 443 and routes the traffic those containers. All is working just fine as expected other than asking internal clients to ignore the self sign cert warning!
It is time for to move to CA cert thus only option as far as I see is https loader but I couldnt figure out how we can reroute the traffic to service loader or directly to pods as service loader(http loader)</p>

<p>Any help apprecaited</p>

<ol>
<li><p>Update Firewall Rules for:</p>

<pre><code>IP: 130.211.0.0/22
tcp:30000-32767
</code></pre></li>
<li><p>Create NodePort type service:</p>

<pre><code>apiVersion: v1
kind: Service
metadata:
  name: yourservicenodeport
  labels:
    name: your-service-node-port
spec:
  type: NodePort
  ports:
    - port: 80
      nodePort: 30001
  selector:
    name: yourpods
</code></pre></li>
<li><p>Create health check.</p>

<p>For the nodeport which is in this case: 30001</p></li>
<li><p>Create an ingress service:</p>

<pre><code>apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: youTheking-ingress-service
spec:
  backend:
    serviceName: yourservice
    servicePort: 80
</code></pre></li>
<li><p>Wait for few minutes, be patient.</p></li>
<li><p>Change the health check on http load balancer.</p>

<p>a. Go to the Load Balancing on Networking Tab.</p>

<p>b. Click Advance menu.</p>

<p>c. Go Backend Services and Edit.</p>

<p>d. Update health check option and use the one created for nodeport service.</p></li>
<li><p>Repeat step 5 for instance group to be recognized health.</p></li>
<li><p>SSL is needed, go back to the load balancer, edit, click Frontend Configuration, then add https with cert.</p></li>
<li><p>You are ready to roll.</p></li>
</ol>
