If you see this page, the full ingress chain is working:
Internet → Cloud NGFW (DNAT) → Traefik (ILB) → nginx pod
TLS terminated by Traefik using a Let's Encrypt certificate issued via cert-manager DNS-01.
Hostname: hello.dev.ahlsellgroup.com
hello.dev.ahlsellgroup.com