You make a lot of great points here. Almost all of the features you call out are actually provided by an open source project called Kalm (https://kalm.dev).

Certs, ingress, cicd integration etc. all come out of the box