是这个东西：
Istio Ingress Gateway
The Istio Ingress Gateway exposes the Application Connector and other Kyma components. The DNS name of the Ingress is cluster-dependant and follows the gateway.{cluster-dns} format, for example gateway.servicemanager.cluster.kyma.cx. Istio Ingress Gateway secures the endpoints with certificate validation. Each call must include a valid client certificate. You can access every exposed Application (App) using the assigned path. For example, to reach the Gateway for the user-custom App, use gateway.servicemanager.cluster.kyma.cx/user-custom.