A web site wants one entry point that terminates TLS and sends books.example.com/api to one Service and everything else to another. Kubernetes 5,150 has two APIs for this layer-7 routing: the original Ingress and its successor, the Gateway API. Both need a controller; on kind 14,561 that is cloud-provider-kind 508 (Local Feature Comparison), left running in a second terminal.