Cant work out how to offload SSL


I have an app listening on 80 and want to present the external endpoint over https, but i can't work out what I need to put in the ingress object to offload the certificate. I have this running on Kubernetes, any examples of how to do this?