Currently you need to upload the SSL cert manually outside K8s if you want to use it for a load balancer. It would make sense to use the native K8s TLS secret for that. Other providers already support that (e.g. Vultr).