How should Ingress controllers be designed for production in Ingress?

Minimize controller-specific features, version controllers deliberately, monitor them, and isolate critical configuration changes. The implementation should be justified by measurable requirements, kept as simple as the problem allows, and validated with realistic tests, telemetry, failure handling, and documented tradeoffs.