support TLS termination via service annotation

i want to be able to add TLS certificate annotation to a service and that the listener will be created as HTTPS protocol instead of TCP, and have a certificate from the secret manager attached to it.