Uses Google-managed certificates and an Ingress resource to set up an
HTTPS load-balancer.
This probably won't be the final version as the GKE Ingress is very
limited and can not do things like redirect URLs, which I need to
decommission the old setup.