Use Kubernetes Gateway API instead of Ingress! (TLS - Cert Manager - Istio - Prometheus) You can find tutorial here.