<p>I have the https being generated for frontend https for flytime.io (cloud run)
<a href="https://i.stack.imgur.com/ZQfCd.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/ZQfCd.png" alt="enter image description here" /></a></p>
<p>Now I want to use this for https support for backend (multi-ingress gke autopilot), from the following manual, intended to used the api.flytime.io domain:
<a href="https://cloud.google.com/kubernetes-engine/docs/how-to/multi-cluster-ingress#https_support" rel="nofollow noreferrer">https://cloud.google.com/kubernetes-engine/docs/how-to/multi-cluster-ingress#https_support</a></p>
<p><a href="https://i.stack.imgur.com/yoGc0.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/yoGc0.png" alt="enter image description here" /></a></p>
<p>But how should I configure the PATH_TO_KEYFILE and PATH_TO_CERTFILE with the manual (or there are other ways to do that)? If using the Google managed certification is not possible (why?), how do I generate a certificate for host name of api.flytime.io and get  PATH_TO_KEYFILE and PATH_TO_CERTFILE?</p>

william007
<p>If you are using GKE managed certificates, you don't use the <code>secret</code> method for setting up SSL in your Ingress. You have to create a <code>ManagedCertificate</code> object and then use the object's name in your Ingress in the <code>networking.gke.io/managed-certificates</code> annotation.</p>
<p>Here's an example. First, create the <code>ManagedCertificate</code> object.</p>
<pre><code>apiVersion: networking.gke.io/v1
kind: ManagedCertificate
metadata:
  name: managed-cert
spec:
  domains:
    - DOMAIN_NAME1 #&lt;===== must be valid a domain you are owning
</code></pre>
<p>Now, reference this in your <code>Ingress</code> as follows:</p>
<pre><code>apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: managed-cert-ingress
  annotations:
    kubernetes.io/ingress.global-static-ip-name: ADDRESS_NAME
    networking.gke.io/managed-certificates: managed-cert #&lt;=== HERE IS YOUR CERT
    kubernetes.io/ingress.class: &quot;gce&quot;
spec:
  defaultBackend:
    service:
      name: mc-service
      port:
        number: SERVICE_PORT
</code></pre>
<p>You can find more information on <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs" rel="noreferrer">this</a> docs page.</p>
