gateway-crds-helm

Envoy Gateway CRDs

Chainguard's redistribution of the gateway-crds-helm Helm chart, which installs the Custom Resource Definitions required by Envoy Gateway and the Kubernetes Gateway API.

Prerequisites

Authentication is required to access this chart. First, authenticate with Chainguard and configure your environment:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Installation

This chart contains CRDs that exceed Kubernetes' annotation size limit, so it must be installed using helm template piped to kubectl apply --server-side rather than helm install directly. This matches the upstream project's recommended installation method.

Both CRD groups are disabled by default and must be opted in:

helm template gateway-crds oci://cgr.dev/ORGANIZATION/charts/gateway-crds-helm \
  --namespace envoy-gateway-system \
  --create-namespace \
  --set crds.gatewayAPI.enabled=true \
  --set crds.envoyGateway.enabled=true \
  | kubectl apply --server-side -f -

To install only the Envoy Gateway extension CRDs (without the Kubernetes Gateway API CRDs):

helm template gateway-crds oci://cgr.dev/ORGANIZATION/charts/gateway-crds-helm \
  --namespace envoy-gateway-system \
  --create-namespace \
  --set crds.envoyGateway.enabled=true \
  | kubectl apply --server-side -f -

About This Chart

This is a redistribution of the upstream Envoy Gateway CRD Helm chart. All upstream configuration options and documentation apply.

For full documentation, see: https://gateway.envoyproxy.io/docs/