Platform & DevOps·Traffic into and inside the cluster
traffic from outside arrives at one front door with the certificate on it, and is routed inwards by hostname and path.
Ingress
Also calledinbound traffic, north-bound entry
Traffic entering a cluster or network boundary from outside, and the configuration describing how it is routed once it arrives. It is where TLS termination, external DNS, WAF rules and public routing all live, so it is a shared, contended object across teams. It is also the natural chokepoint for rate limiting and authentication, which is why it accretes responsibilities until somebody calls it an API gateway.