<p>I am using the standard <a href="https://github.com/kubernetes/contrib/tree/master/ingress/controllers/gce#the-ingress" rel="nofollow">L7 load balancing ingress</a> on <a href="https://cloud.google.com/container-engine/" rel="nofollow">Google Container Engine</a>. I have installed it through the following ingress definition:</p>

<pre><code>apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: l7-ingress-{{environment}}
spec:
  tls:
    - secretName: web-secret
  backend:
    serviceName: web
    servicePort: 80
</code></pre>

<p>Now, my question is, how do I ensure that the TLS certificate is updated once the secret <code>web-secret</code> changes? AFAICT, it currently stays the same even though the underlying secret changes.</p>

<p>Apparently, the L7 ingress doesn't currently monitor the TLS secret for changes. But <a href="https://github.com/kubernetes/contrib/pull/791" rel="nofollow">a PR</a> to solve this has been merged, so it should only be a matter of time.</p>
