If you decide to use the GCP Ingress (which I would only do if you want to use google identity aware proxy), you will need to have some kind of additional reverse proxy behind the GCP ingress which implements the routing to the flyte backens (because of the readiness probe issue mentioned above). You could use an nginx for this. We use the istio service mesh.