I'm using GKE with an Ingress and a ManagedCertificate for my domain (details redacted). My YAML manifest is as follows:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: my-name-ingress
  annotations:
    kubernetes.io/ingress.global-static-ip-name: 'My static Ip' 
    networking.gke.io/managed-certificates: gke-managed-cert
    kubernetes.io/ingress.allow-http: 'true' 
spec:
  rules:
    - host: my.host
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: nodejs-api-service
                port:
                  number: 80

I’ve Verified:

• DNS: nslookup example returns the expected public IP.
• Forwarding Rules: A rule exists with the same public IP.
• Ingress: kubectl get ingress my-ingress -o wide shows no external IP.
• ManagedCertificate: It remains in "Provisioning" with domain status "FailedNotVisible".

What could cause the Ingress to not display an external IP and the ManagedCertificate to remain "FailedNotVisible," and what steps should I take next?