I digged deeper and I am pretty sure this is a misconfiguration of the v2 build:
I disabled the healthyness and readyness probes on the webserver pod in the GKE cluster running composer v2.
Then I still saw the following messages in the logs:

This IP (10.63.129.6) is belonging to the airflow-monitoring pod in the composer-system namespace. It's poking and then 2 seconds later the HUP signal is being received by gunicorn.
Investigating on the monitoring pod is not so easy as its secured through GKEAutopilot's authz.