Envoy Gateway Production Deployment

Deployment Modes

Single Tenant (Default)

• One GatewayClass per Envoy Gateway controller
• Simplest model; suitable for most single-team deployments
• All Gateways share the same controller and Envoy Proxy fleet

Multi-Tenant

• Deploy separate Envoy Gateway controllers per tenant namespace
• Each controller must have a unique controller name in its GatewayClass
• Provides strong tenant isolation at the control plane level
• Install via separate Helm releases with distinct --set config.envoyGateway.gateway.controllerName=...