How should Kubernetes Ingress be designed for production in Ingress?

Choose and operate a supported controller, define TLS, health behavior, annotations carefully, and standardize routing policies. The implementation should be justified by measurable requirements, kept as simple as the problem allows, and validated with realistic tests, telemetry, failure handling, and documented tradeoffs.