how to implement Letsencrypt free https certificate in http(s) load balancer for a GCE vm instance

[Hemanth Kumar]

How do i get and implement Letsencrypt https certificate over http(s) load balancer. I will be using ubuntu16.04 VM instance in GCE running apache web server where the website files will be hosted and the database will be at googleSQL(MySQL). And also as the letsencrypt cert is valid only 90 days, how do i renew it in this setup. Does google offer free https cert like letsencrypt which can work with GCE VM instance ?
PS:I dont want to use app Engine.

[Digil (Google Cloud Platform Support)]

In order to use the HTTP(s) load balancing, you have to get the SSL certificates. This[1] help center article on SSL will walk you through the process of creating and installing the certificate.

If you already have the certificate, you go directly through the installation steps on this help center article [2].

There is also a detailed information on how to install the certificate on this 3rd party website[3].

You need to contact your certificate provider for renewal. Once the certificate is renewed you need to update the load balancer with the new certificate ([2]).

Google currently doesn’t offer free SSL certificates for GCE VMs.

[1] https://cloud.google.com/compute/docs/load-balancing/http/ssl-certificates

[2] https://cloud.google.com/compute/docs/load-balancing/http/ssl-certificates#createresource

[3] https://rubyinrails.com/2017/09/18/google-cloud-https-load-balancing-with-letsencrypt-certificate/

[Manikandan Krishnamurthy]

Hi Hemanth,

I am user of GCE and letsencrypt.

Please check below link for letsencrypt renewal.

Link:
https://community.letsencrypt.org/t/renew-letsencrypt-certificate/34677

[Hemanth Kumar]

Hi is it also possible to implement letsencrypt only for a single sub-domain for which the hosting will be GCE instance(ubuntu) over https loadbalancing ?  If this is the case will i installing cerbot inside the instance and later add it over https loadbalancing ?
PS:domain is with another provider and files for the main domain are hosted over cpanel at different provider.

[A Holbreich]

I think this could be possible with custom scripts. But not possible out of the box 

[Digil (Google Cloud Platform Support)]

There is an option for adding certificate for just a sub domain.

You can check this [1] link for the similar concern you are having now.

[1] https://community.letsencrypt.org/t/certificate-for-just-a-subdomain/23785/5