Are you using nginx-ingress or ingress-nginx?

Awesome! One idea: If you are pinning content on this node too, look into using the Kubo NoFetch parameter. This will instruct Kubo to only serve content it has pinned via the gateway port.

Nice article! A few comments:

• Kubo contains state (config file and blockstore) and thus, it should really be a StatefulSet, instead of a Deployment.
• Consider adding the proxy_cache directive to nginx. IPFS content is all static, so there’s no reason to go back to Kubo for serving static files when nginx can do this significantly faster. In your current config, nginx is terminating TLS and passing through everything else.