diff --git a/pipelines/shared-helpers/prepare-cluster-for-integration-tests.sh b/pipelines/shared-helpers/prepare-cluster-for-integration-tests.sh
index 7c754434c..3138b41f8 100755
--- a/pipelines/shared-helpers/prepare-cluster-for-integration-tests.sh
+++ b/pipelines/shared-helpers/prepare-cluster-for-integration-tests.sh
@@ -495,6 +495,7 @@ metadata:
     app: ${supervisor_app_name}
   annotations:
     kapp.k14s.io/disable-default-label-scoping-rules: ""
+    networking.gke.io/load-balancer-type: "Internal"
 spec:
   type: LoadBalancer
   selector:
@@ -523,6 +524,7 @@ metadata:
     app: dex
   annotations:
     kapp.k14s.io/disable-default-label-scoping-rules: ""
+    networking.gke.io/load-balancer-type: "Internal"
 spec:
   type: LoadBalancer
   selector:
@@ -1196,6 +1198,7 @@ metadata:
   name: ${supervisor_app_name}
   namespace: ${supervisor_namespace}
   annotations:
+    kubernetes.io/ingress.class: "gce-internal"
     kubernetes.io/ingress.allow-http: "false"
     nginx.ingress.kubernetes.io/backend-protocol: HTTPS
     # TODO Re-enable backend TLS cert verification once the Supervisor's default TLS cert is generated by automation in this script.