Wow. That's beyond noob 😄 Also - thanks for using kq - I actually had no idea that it existed, and now I do! 😄 My first instinct is that you might need your kq call to depend on the istio one. The second instinct is that even though istio is done, LB ip takes an undefined amount of time to arrive in k8s - there really is no way of telling WHEN it will actually be applied, so it's really tricky to ensure you make the call once it's actually resolved.