Exposing every web service with its own cloud load balancer is costly and gives no routing by host or URL path. An Ingress sends external HTTP and HTTPS traffic to the right Service based on host and path, and can terminate TLS in one place. Use it when several apps like /api and / share one domain or entry point. An Ingress does nothing without an Ingress controller running in the cluster, which trips up many beginners.