So first, @Fabio Grätz thank you for your help! Second, we use GKE ingress for all our deployments so we didn’t see any reason to use other ingress controller

Fair point. Because it automates creation of tls certificates with managed services like iap and cloud armore, this also makes a lot of sense in general.

Yes exactly