How should Ingress controllers be designed for production in Ingress?

Minimize controller-specific features, version controllers deliberately, monitor them, and isolate critical configuration changes.