When running in KRaft mode, the various listener-related resources such as per-broker services, ingresses, or routes should be created only for broker-type nodes. They should not be created for the controller nodes. Also, the bootstrap services should be pointing only to the broker nodes. And the Ingress listener validation should be updated to validate the per-broker configs only for broker ndoes.