Without ENTRYPOINT, Kubernetes replaces CMD with args, causing the container to try executing "--ingress-class=gingress" as a binary directly.