diff --git a/config/recipes/gclb/01-elastic-stack.yaml b/config/recipes/gclb/01-elastic-stack.yaml
index 7c5363ce9f..b753509198 100644
--- a/config/recipes/gclb/01-elastic-stack.yaml
+++ b/config/recipes/gclb/01-elastic-stack.yaml
@@ -23,11 +23,6 @@ spec:
     count: 3
     config:
       node.store.allow_mmap: false
-      # Enable anonymous access to allow GCLB health probes to succeed
-      xpack.security.authc:
-        anonymous:
-          username: anon
-          roles: monitoring_user
     podTemplate:
       spec:
         containers:
diff --git a/config/recipes/gclb/02-ingress.yaml b/config/recipes/gclb/02-ingress.yaml
index bd2e2dcff1..112c2918a4 100644
--- a/config/recipes/gclb/02-ingress.yaml
+++ b/config/recipes/gclb/02-ingress.yaml
@@ -37,3 +37,18 @@ spec:
                 name: hulk-kb-http
                 port:
                   name: https
+---
+apiVersion: networking.gke.io/v1
+kind: HealthCheckPolicy
+metadata:
+  name: es-lb-healthcheck
+spec:
+  default:
+    config:
+      tcpHealthCheck:
+        port: 8080
+      type: TCP
+  targetRef:
+    group: ''
+    kind: Service
+    name: hulk-es-http