ingress-patterns

# Skill: Ingress Patterns > **Expertise:** NGINX Ingress Controller, MetalLB, cert-manager TLS, rate limiting, CORS, canary routing. ## When to load When creating or reviewing Kubernetes Ingress resources, setting up TLS, configuring rate limits, or debugging 502/504 responses. ## Standard Production Ingress ```yaml apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: api-service namespace: production annotations: # TLS + redirect nginx.ingress.kubernetes.io/ssl-redirect: "true" nginx.ingress.kubernetes.io/force-ssl-redirect: "true" # Rate limiting nginx.ingress.kubernetes.io/limit-rps: "100" nginx.ingress.kubernetes.io/limit-connections: "20" # Timeouts (seconds) nginx.ingress.kubernetes.io/proxy-connect-timeout: "10" nginx.ingress.kubernetes.io/proxy-read-timeout: "60" nginx.ingress.kubernetes.io/proxy-send-timeout: "60" # TLS cert via cert-manager cert-manager.io/cluster-issuer: "letsencrypt-prod" # Security headers nginx.ingress.kubernetes.io/configuration-snippet: | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header X-Frame-Options DENY always; add_header X-Content-Type-Options nosniff always; spec: ingressClassName: nginx tls: - hosts: [api.example.com] secretName: api-example-com-tls rules: - host: api.example.com http: paths: - path: / pathType: Prefix backend: ...