I've seen people use Wallarm (https://www.wallarm.com/). They have a controller based on nginx-ingress-controller that you can deploy into your k8s cluster. I'm building a platform on top of k8s and the clusters we provision use the same setup (cert-manager + ALB + nginx-ingress). Worth a try!