<p>I have a service of ingress type LoadBalancer. </p>

<pre><code>spec:
  type: LoadBalancer
</code></pre>

<p>GKE create a loadbalancer and forwarding rules. The Load Balancer created by GKE/GCloud is tcp. I want Google Managed SSL Certs. I created the certs using gcloud </p>

<pre><code>gcloud beta compute ssl-certificates create... 
</code></pre>

<p>How do I attach this cert to the LoadBalancer defined by GKE. 
There is no section in the console to edit the load balancer/front end to add SSL certs? Can I do it using the gcloud CLI</p>

<p>Thanks</p>

Rajesh Jain
<p>If you want to terminate SSL on your GCE load balancer it can't be a TCP load balancer because a TCP load balancer is a Layer 4 load balancer, and SSL is at layer 7 in the network stack. For this type of load balancer, you can set up a Kubernetes <a href="https://kubernetes.io/docs/concepts/services-networking/ingress/" rel="nofollow noreferrer">Ingress</a> with an ingress controller like <a href="https://github.com/kubernetes/ingress-nginx" rel="nofollow noreferrer">nginx</a> or <a href="https://docs.traefik.io/user-guide/kubernetes/" rel="nofollow noreferrer">Traefik</a> and terminate SSL on the Ingress.</p>
<p>GCE support layer 7 load balancers but they are not supported in Kubernetes yet (afaik). However, you could actually terminate SSL on GCE if you'd like to, by provisioning an <a href="https://cloud.google.com/load-balancing/docs/https/setting-up-https" rel="nofollow noreferrer">HTTPS or L7</a> load balancer, but you will have to manually point it to a Kubernetes <a href="https://kubernetes.io/docs/concepts/services-networking/service/#nodeport" rel="nofollow noreferrer">Service of the NodePort</a> type.</p>
<p>Update:</p>
<p>Another <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs" rel="nofollow noreferrer">doc</a> about Ingresses with Google managed SSL certs.</p>
