The GKE ingress controller is really nice because it supports identity aware proxy, basically google managed login screen that is placed before Flyte. We are required to use this for security reasons.