How should certificate management be designed for production in Ingress?

Use an automated issuer, secure private keys, monitor renewal failures, and test certificate rotation.