The documentation found here: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes#step-5-%E2%80%94-rolling-out-production-issuer actually covers the issue in question, albeit slightly further down the article. The file that’s recommended to be applied has a service.spec.externalTrafficPolicy set to Local. This intentionally marks other nodes as unhealthy to optimize network traffic. This value can be changed to Cluster, but may generate unnecessary network hops.