Found issue. Incorrect manifest
Need to specify:

tls:
  - hosts:
      - test2.domain.com
    secretName: keyvault-hello-world-ingress

and annotation:

kubernetes.azure.com/tls-cert-keyvault-uri: https://kv-xxxxxxx-dev.vault.azure.net/certificates/certificatename