Try using ingress:true annotation instead of the named NEG annotation.

cloud.google.com/neg: '{"ingress": true}