Kubernetes ingress + gcloud ssl policy

I have kubernetes managed by terraform (the old non-offical provider at the moment, and tf 1.11).

Terraform manages the ingress, and kubernetes handles creation of the gcloud load balancer.

I need to configure the load balancer though to not allow tls 1.0, and I’m wondering how I should approach this.

What would be the ideal setup in this case, and how would you approach this?