Thank you david. I did a slightly different method for the ingress but your information on how build a certificate was exemplar.

I am new at GKE and fighted all the night to have my load balancer working with all my different domains.

i wonder, the solution you built with the let encrypt, does it renovate automatically or i need to manually update it?