---
name: "kubernetes-ingress-nginx-controller"
description: "Configure production Ingress-NGINX: proxy timeouts, SSL certificates, and path rewrite rules."
metadata:
  author: "Kubernetes"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "configure ingress-nginx annotations"
  - "increase client_max_body_size ingress"
  - "setup ingress ssl redirect"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# Ingress-NGINX Controller Tuning & Annotations

Configures Kubernetes ingress-nginx: SSL redirect, CORS headers, client_max_body_size, proxy-read-timeout, rate-limiting annotations, modsecurity WAF integration, and custom snippet configurations.

## When to Invoke
Invoke this skill whenever you need to:
- configure ingress-nginx annotations
- increase client_max_body_size ingress
- setup ingress ssl redirect

## Execution SOP & Rules
1. Apply annotations: nginx.ingress.kubernetes.io/proxy-body-size: '100m' and proxy-read-timeout: '300'.
2. Configure SSL redirect: nginx.ingress.kubernetes.io/ssl-redirect: 'true' and force-ssl-redirect: 'true'.
3. Define path rules with pathType: Prefix and backend Service port mappings.
4. Validate Ingress controller logs: kubectl logs -n ingress-nginx -l app.kubernetes.io/name=ingress-nginx.

## Verification Checklist
- Run local linting, syntax validation, and type-checks before reporting completion.
- Ensure all created or modified files adhere to workspace boundaries and avoid uncommitted secrets.
- Verify tests or build commands exit cleanly with return code 0.