Resource Kubernetes quản lý external access đến Services, thường qua HTTP/HTTPS.
Ingress cần Ingress Controller (NGINX, Traefik, HAProxy). Hỗ trợ: virtual hosting, SSL termination, path-based routing, rate limiting. Production cần cert-manager cho Let’s Encrypt.