是這個東西：
Istio Ingress Gateway
The Istio Ingress Gateway exposes the Application Connector and other Kyma components. The DNS name of the Ingress is cluster-dependant and follows the gateway.{cluster-dns} format, for example gateway.servicemanager.cluster.kyma.cx. Istio Ingress Gateway secures the endpoints with certificate validation. Each call must include a valid client certificate. You can access every exposed Application (App) using the assigned path. For example, to reach the Gateway for the user-custom App, use gateway.servicemanager.cluster.kyma.cx/user-custom.
https://kyma-project.io/docs/components/application-connector