Using HTTP2 with GKE and Google Managed Certificates

[turbo1912]

I am using an Ingress using Google-managed SSL certs mostly similar to what is described here:

https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs#setting_up_a_google-managed_certificate

However my backend service is a grpc service that is using HTTP2. According to the same documentation if I am using HTTP2 my backend needs to be "configured with SSL".

This sounds like I need a separate set of certificates for my backend service to configure it with SSL.

Is there a way to use the same Google managed certs here as well?

What are my other options here? I am using Google managed certs for the Ingress not to manage any certs on my own, if I then use self signed certificates for my service, that kind of defeats the purpose.

[turbo1912]

I am closing this issue as google managed certificates can only be used for load balancers and cant be used for lb -> backend traffic.

If the service is using HTTP2 marked by the cloud.google.com/app-protocols: '{"my-port":"HTTP2"}' annotation, yes the service really needs to be configured with SSL. I personally ended up using a self signed certificate for this.