<p>Can’t find any resources that simply say here’s where your cert goes and here’s how to enable it. I have the cert there when I run <code>gcloud compute ssl-certificates list</code>. I have a cluster with kubernetes running and exposing http traffic via this service:</p>

<pre><code>{
  "kind": "Service",
  "apiVersion": "v1",
  "metadata": {
    "name": "foo-frontend-service"
  },
  "spec": {
    "selector": {
      "app": "foo-frontend-rc"
    },
    "ports": [
      {
        "protocol": "TCP",
        "port": 80,
        "targetPort": 3009
      }
    ]
  }
}
</code></pre>

<ol>
<li>Need to know how to put the cert in the right place to be utilized</li>
<li>Need to know how to reconfigure my service</li>
<li>Need to know what my new SSL endpoint will be. Is it the same?</li>
</ol>

<p>K8s doesn't have special TLS support for the ordinary services. You need to use one of the following methods:</p>

<ol>
<li><p>using Ingress: see <a href="http://kubernetes.io/docs/user-guide/ingress/#tls" rel="noreferrer">http://kubernetes.io/docs/user-guide/ingress/#tls</a>. You need to choose a Ingress controller which implements the Ingress functionalities, you can use <a href="https://github.com/kubernetes/contrib/tree/master/ingress/controllers/gce#tls" rel="noreferrer">GLBC</a> if you are on GCE, or you can use the <a href="https://github.com/kubernetes/contrib/tree/master/ingress/controllers/nginx#tls" rel="noreferrer">nginx one</a>. Both of them supports TLS. Please note that the Ingress is still beta feature with <a href="https://github.com/kubernetes/contrib/blob/master/ingress/controllers/gce/BETA_LIMITATIONS.md" rel="noreferrer">limitations</a>.</p></li>
<li><p>The service-loadbalancer in the contrib repo also supports tls: <a href="https://github.com/kubernetes/contrib/tree/master/service-loadbalancer#ssl-termination" rel="noreferrer">https://github.com/kubernetes/contrib/tree/master/service-loadbalancer#ssl-termination</a></p></li>
</ol>
