title: GKE Managed Certificate not serving over HTTPS
body: <p>I'm trying to spin up a Kubernetes cluster that I can access securely and can't seem to get that last part. I am following this tutorial: <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs" rel="nofollow noreferrer">https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs</a></p>
  
  <p>Here are the <code>.yaml</code> files i'm using for my Ingress, Nodeport and ManagedCertificate</p>
  
  <pre><code>apiVersion: networking.gke.io/v1beta1
  kind: ManagedCertificate
  metadata:
    name: client-v1-cert
  spec:
    domains:
      - api.mydomain.com
  ---
  apiVersion: v1
  kind: Service
  metadata:
    name: client-nodeport-service
  spec:
    selector:
      app: myApp
    type: NodePort
    ports:
      - protocol: TCP
        port: 80
        targetPort: 3000
  ---
  apiVersion: extensions/v1beta1
  kind: Ingress
  metadata:
    name: api-ingress
    annotations:
      kubernetes.io/ingress.global-static-ip-name: api-v1
      networking.gke.io/managed-certificates: client-v1-cert
  spec:
    backend:
      serviceName: client-nodeport-service
      servicePort: 80
  </code></pre>
  
  <p>No errors that I can see in the GCP console. i can also access my API from <code>http://api.mydomain.com/</code>, but it won't work when I try <code>https</code>, just not https. Been banging my head on this for a few days and just wondering if there's some little thing i'm missing.</p>
  
  <p>--- UPDATE ---</p>
  
  <p>Output of <code>kubectl describe managedcertificate</code></p>
  
  <pre><code>Name:         client-v1-cert
  Namespace:    default
  Labels:       &lt;none&gt;
  Annotations:  kubectl.kubernetes.io/last-applied-configuration:
  API Version:  networking.gke.io/v1beta1
  Kind:         ManagedCertificate
  Metadata:
    Creation Timestamp:  2019-07-01T17:42:43Z
    Generation:          3
    Resource Version:    1136504
    Self Link:           /apis/networking.gke.io/v1beta1/namespaces/default/managedcer
  tificates/client-v1-cert
    UID:                 b9b7bec1-9c27-33c9-a309-42284a800179
  Spec:
    Domains:
      api.mydomain.com
  Status:
    Certificate Name:    mcrt-286cdab3-b995-40cc-9b3a-28439285e694
    Certificate Status:  Active
    Domain Status:
      Domain:     api.mydomain.com
      Status:     Active
    Expire Time:  2019-09-29T09:55:12.000-07:00
  Events:         &lt;none&gt;
  </code></pre>