ok thanks, will have a play with that setup. as a workaround i had labelled my k3s nodes so i know which ones are ingress-gateways, and pinned the ingress-controller pods to those nodes only