gateway-helm

Envoy Gateway

Chainguard's redistribution of the gateway-helm Helm chart, pre-configured with hardened Chainguard Images for Envoy Gateway and the Envoy rate limit service.

Prerequisites

Authentication is required to access this chart and its images. First, authenticate with Chainguard and configure your environment:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Create an image pull secret for the cluster:

kubectl create secret docker-registry cgr-pull-secret \
  --docker-server=cgr.dev \
  --docker-username="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Username')" \
  --docker-password="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Secret')" \
  --namespace envoy-gateway-system

Installation

helm install envoy-gateway oci://cgr.dev/ORGANIZATION/charts/gateway-helm \
  --namespace envoy-gateway-system \
  --create-namespace \
  --set global.imagePullSecrets[0].name=cgr-pull-secret

About This Chart

This is a redistribution of the upstream Envoy Gateway Helm chart. All upstream configuration options and documentation apply.

For full documentation, see: https://gateway.envoyproxy.io/docs/