Namely, there are some APIs in the networking.gke.io API group that can be installed even on non-GKE cluster. See: https://github.com/nais/fqdn-policy