title: SSL Certificate not updating in Google Cloud Console GKE
body: <p>I got a task from my client related to adding SSL certificate on site. the site already had a Let's encrypt SSL Certificate installed on it that is now expired ( <em>i got this info by clicking on browser <strong>&quot;Not Secure&quot;</strong> red notification that appears left to your entered url, and then going in Certificate option in Popup</em> ). <a href="https://i.stack.imgur.com/dwcOH.png" rel="nofollow noreferrer">screenshot of popup</a></p>
  <p>My client site is hosted on google cloud. The site has 4 vm instances in 1 instance group. It also has a TCP load balancer with 1 target pool with targetpool - targetinstance as Backend type and have 4 above vm instances showing in Backend. the frontend configuration of load balancer contains <strong>TCP</strong> as Protocol, <strong>Premium</strong> as Network Tier and <strong>80-443</strong> value in port option. <a href="https://i.stack.imgur.com/G1O7M.png" rel="nofollow noreferrer">screenshot of frontend configuration</a></p>
  <p>Each of the 4 VM instance is showing two values in <strong>&quot;in use by&quot;</strong> column, one is of the instance group name and the second one is of tcp load balancer name. In the instance group its showing <strong>in use by</strong> as &quot;production&quot; clicking on which taking to production cluster.</p>
  <p>I then open the cluster shell from connect option and run this command.</p>
  <pre><code>kubectl get secrets/tls-retail -o yaml
  </code></pre>
  <p>here i found that this secret is related to SSL and the value in tls.crt field (when base64 decoded and checked from certificate decoder) shows same expiry date as show in browser popup</p>
  <p>i then changed the tls.crt value in the same secret file and saved it using below code but it didn't get any affect.</p>
  <pre><code>EDITOR=nano kubectl edit secrets tls-retail
  </code></pre>
  <p>from this stackoverflow link ( <a href="https://stackoverflow.com/questions/54991991/how-to-restart-a-gcp-ingress-item-to-use-updated-secret">How to restart a GCP Ingress Item To Use Updated Secret</a> ) I found that it take 10-20 minutes to take affect but even after 1 to 2 hours there isn't any affect. Can you guide me why this change isn't taking any affect. or if someone can guide me how to use a google managed ssl certificate in my above case as i am new to Google Console and GKE.</p>
  <p>Thanks</p>