Failed to open IST listener

Using domain names is not recommended. You don’t need public IPs. You can use the private IPs assigned by google and have all intra-node communication travel via private network (recommended for security). Then only the load-balancer, or proxy has a public IP and a private in the same network as the nodes. This greatly reduces the number of attack vectors.