Platform & DevOps·Traffic into and inside the cluster
the routing rules you wrote in a manifest become a running proxy's configuration, reloaded a second or two after you apply them.
Ingress controller
Also calledingress proxy, edge proxy
The workload that watches routing objects and reconfigures a real proxy to match, plus the external load balancer in front of it. It is the piece that turns declarative routing into packets moving, and it is a shared single point of failure for every public path in the cluster. Its reload behaviour, its certificate handling and its default timeouts are three of the most-argued-about settings on any platform.