How to implement SSL cert over http(s) loadbalancer in google cloud for a subdomain

You write https loadbalancer. This practically means, there is a head machine which does https and delivers contents from webservers behind which are accessed via unsecured http. Is this the case? Has this load balancer been setup by yourself?