Ingress doesn't get picked up eventhough it's enabled and has correct status

[cromefire]

I have the following ingress:

apiVersion: networking.k8s.io/v1
kind: Ingress
spec:
  ingressClassName: traefik-lan
  rules:
  - host: <host>
  tls:
  - hosts:
    - <host>
status:
  loadBalancer:
    ingress:
    - ip: 10.5.0.1

But it's not picked up by external-dns, there's nothing in the logs...

[2025-07-15  22:20:31]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:31Z" level=info msg="config: {APIServerURL: KubeConfig: RequestTimeout:30s DefaultTargets:[] GlooNamespaces:[gloo-system] SkipperRouteGroupVersion:zalando.org/v1 Sources:[ingress service crd] Namespace: AnnotationFilter: LabelFilter: IngressClassNames:[traefik-lan] FQDNTemplate: CombineFQDNAndAnnotation:false IgnoreHostnameAnnotation:false IgnoreNonHostNetworkPods:false IgnoreIngressTLSSpec:false IgnoreIngressRulesSpec:false ListenEndpointEvents:false ExposeInternalIPV6:false GatewayName: GatewayNamespace: GatewayLabelFilter: Compatibility: PodSourceDomain: PublishInternal:false PublishHostIP:false AlwaysPublishNotReadyAddresses:false ConnectorSourceServer:localhost:8080 Provider:coredns ProviderCacheTime:0s GoogleProject: GoogleBatchChangeSize:1000 GoogleBatchChangeInterval:1s GoogleZoneVisibility: DomainFilter:[<domain>] ExcludeDomains:[] RegexDomainFilter: RegexDomainExclusion: ZoneNameFilter:[] ZoneIDFilter:[] TargetNetFilter:[] ExcludeTargetNets:[] AlibabaCloudConfigFile:/etc/kubernetes/alibaba-cloud.json AlibabaCloudZoneType: AWSZoneType: AWSZoneTagFilter:[] AWSAssumeRole: AWSProfiles:[] AWSAssumeRoleExternalID: AWSBatchChangeSize:1000 AWSBatchChangeSizeBytes:32000 AWSBatchChangeSizeValues:1000 AWSBatchChangeInterval:1s AWSEvaluateTargetHealth:true AWSAPIRetries:3 AWSPreferCNAME:false AWSZoneCacheDuration:0s AWSSDServiceCleanup:false AWSSDCreateTag:map[] AWSZoneMatchParent:false AWSDynamoDBRegion: AWSDynamoDBTable:external-dns AzureConfigFile:/etc/kubernetes/azure.json AzureResourceGroup: AzureSubscriptionID: AzureUserAssignedIdentityClientID: AzureActiveDirectoryAuthorityHost: AzureZonesCacheDuration:0s AzureMaxRetriesCount:3 CloudflareProxied:false CloudflareCustomHostnames:false CloudflareDNSRecordsPerPage:100 CloudflareDNSRecordsComment: CloudflareCustomHostnamesMinTLSVersion:1.0 CloudflareCustomHostnamesCertificateAuthority:none CloudflareRegionalServices:false CloudflareRegionKey: CloudflareRecordComment: CoreDNSPrefix:/cluster-dns/ AkamaiServiceConsumerDomain: AkamaiClientToken: AkamaiClientSecret: AkamaiAccessToken: AkamaiEdgercPath: AkamaiEdgercSection: OCIConfigFile:/etc/kubernetes/oci.yaml OCICompartmentOCID: OCIAuthInstancePrincipal:false OCIZoneScope:GLOBAL OCIZoneCacheDuration:0s InMemoryZones:[] OVHEndpoint:ovh-eu OVHApiRateLimit:20 OVHEnableCNAMERelative:false PDNSServer:http://localhost:8081 PDNSServerID:localhost PDNSAPIKey: PDNSSkipTLSVerify:false TLSCA: TLSClientCert: TLSClientCertKey: Policy:upsert-only Registry:txt TXTOwnerID:cluster-lan TXTPrefix:edns.%{record_type}. TXTSuffix: TXTEncryptEnabled:true TXTEncryptAESKey:****** Interval:1m0s MinEventSyncInterval:5s Once:false DryRun:false UpdateEvents:false LogFormat:text MetricsAddress::7979 LogLevel:debug TXTCacheInterval:0s TXTWildcardReplacement: ExoscaleEndpoint: ExoscaleAPIKey: ExoscaleAPISecret: ExoscaleAPIEnvironment:api ExoscaleAPIZone:ch-gva-2 CRDSourceAPIVersion:externaldns.k8s.io/v1alpha1 CRDSourceKind:DNSEndpoint ServiceTypeFilter:[] CFAPIEndpoint: CFUsername: CFPassword: ResolveServiceLoadBalancerHostname:false RFC2136Host:[] RFC2136Port:0 RFC2136Zone:[] RFC2136Insecure:false RFC2136GSSTSIG:false RFC2136CreatePTR:false RFC2136KerberosRealm: RFC2136KerberosUsername: RFC2136KerberosPassword: RFC2136TSIGKeyName: RFC2136TSIGSecret: RFC2136TSIGSecretAlg: RFC2136TAXFR:false RFC2136MinTTL:0s RFC2136LoadBalancingStrategy:disabled RFC2136BatchChangeSize:50 RFC2136UseTLS:false RFC2136SkipTLSVerify:false NS1Endpoint: NS1IgnoreSSL:false NS1MinTTLSeconds:0 TransIPAccountName: TransIPPrivateKeyFile: DigitalOceanAPIPageSize:50 ManagedDNSRecordTypes:[A AAAA CNAME TXT] ExcludeDNSRecordTypes:[] GoDaddyAPIKey: GoDaddySecretKey: GoDaddyTTL:0 GoDaddyOTE:false OCPRouterName: PiholeServer: PiholePassword: PiholeTLSInsecureSkipVerify:false PiholeApiVersion:5 PluralCluster: PluralProvider: WebhookProviderURL:http://localhost:8888 WebhookProviderReadTimeout:5s WebhookProviderWriteTimeout:10s WebhookServer:false TraefikDisableLegacy:false TraefikDisableNew:false NAT64Networks:[] ExcludeUnschedulable:true ForceDefaultTargets:false}"
[2025-07-15  22:20:31]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:31Z" level=info msg="GitCommitShort=unknown, GoVersion=go1.24.4, Platform=linux/amd64, UserAgent=ExternalDNS/v20250626-v0.18.0"
[2025-07-15  22:20:31]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:31Z" level=info msg="Instantiating new Kubernetes client"
[2025-07-15  22:20:31]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:31Z" level=debug msg="apiServerURL: "
[2025-07-15  22:20:31]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:31Z" level=debug msg="kubeConfig: "
[2025-07-15  22:20:31]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:31Z" level=info msg="Using inCluster-config based on serviceaccount-token"
[2025-07-15  22:20:31]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:31Z" level=debug msg="serving 'healthz' on ':7979/healthz'"
[2025-07-15  22:20:31]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:31Z" level=debug msg="serving 'metrics' on ':7979/metrics'"
[2025-07-15  22:20:31]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:31Z" level=debug msg="registered '19' metrics"
[2025-07-15  22:20:31]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:31Z" level=info msg="Created Kubernetes client https://10.0.0.1:443"
[2025-07-15  22:20:32]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	W0715 20:20:32.027417       1 client_config.go:667] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
[2025-07-15  22:20:32]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	time="2025-07-15T20:20:32Z" level=debug msg="using TLS for etcd"
[2025-07-15  22:21:01]	(lan-external-dns-6bb6476b7d-2bfcc external-dns)	I0715 20:21:01.831881       1 transport.go:356] "Warning: unable to cancel request" roundTripperType="*instrumented_http.Transport"

Ingresses are enabled though and even with or without specifying the ingress class and with and without the domain filter, it just doesn't work:

# yaml-language-server: $schema=https://github.com/kubernetes-sigs/external-dns/raw/refs/tags/v0.18.0/charts/external-dns/values.schema.json
# $schema: https://github.com/kubernetes-sigs/external-dns/raw/refs/tags/v0.18.0/charts/external-dns/values.schema.json

domainFilters:
  - "<root domain>"

sources:
  - ingress
  - service
  - crd
  #- traefik-proxy

extraArgs:
  - --coredns-prefix=/cluster-dns/
  - --txt-encrypt-enabled
  - --txt-encrypt-aes-key="<censored>"
  - --ingress-class=traefik-lan

managedRecordTypes:
  - A
  - AAAA
  - CNAME
  - TXT
txtOwnerId: "cluster-lan"
txtPrefix: "edns.%{record_type}."

logLevel: debug

service:
  ipFamilyPolicy: PreferDualStack

provider:
  name: coredns

env:
  - name: ETCD_URLS
    value: https://<etcd domain>:2379
  - name: ETCD_USERNAME
    valueFrom:
      secretKeyRef:
        name: lan-etcd-credentials
        key: username
  - name: ETCD_PASSWORD
    valueFrom:
      secretKeyRef:
        name: lan-etcd-credentials
        key: password

No error, just silence and the logs are already set to debug.

Also tried a CRD-based test, also doesn't get picked up, there's just not much I can debug here, I triple checked all the settings with the many issues on this topic, but every thing here, seems good, the source is enabled and the ingress has the correct status, even the service account looks good. I also enabled the traefik source once, but it started complaining that the CRDs weren't there, so it's also communicating with the API controller for sure...