Thank you for the response. Once the GLBC creates the external load balancer, certificate is attached, and corresponding record created in CloudDNS, it should become Active state (5-15 minutes). Even after Active, it still takes about 5 minutes for the certificate to be trusted. Beyond this, given it's blackbox, only way to get information is gcloud and looking at results in JSON or GCP RESTful API. I'm considering a follow-up w/ cert-manager as would offer greater flexibility.