How should certificate management be designed for production in Ingress?

Use an automated issuer, secure private keys, monitor renewal failures, and test certificate rotation. The implementation should be justified by measurable requirements, kept as simple as the problem allows, and validated with realistic tests, telemetry, failure handling, and documented tradeoffs.