> ## Documentation Index > Fetch the complete documentation index at: https://docs.conduktor.io/llms.txt > Use this file to discover all available pages before exploring further. # Conduktor Gateway on Kubernetes — Helm deployment > Deploy Conduktor Gateway on Kubernetes using the official Helm chart. We recommend deploying Conduktor Gateway on Kubernetes using the official [Helm chart](https://helm.conduktor.io) for the best experience and supportability. Kubernetes keeps stateless services like Gateway highly available with built-in routing, scaling and self-healing. ## Local example We recommend running the [local-stack example](https://github.com/conduktor/conduktor-reference-architecture/tree/main/local-stack) from our Conduktor Reference Architecture repository. This stack creates a production-like local deployment of the entire Conduktor Platform using [k3d](https://k3d.io/) as a local Kubernetes cluster. It includes: | Component | Required for Gateway? | Details | | -------------------------- | --------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Conduktor Gateway** | Yes | Deployed with [security mode](/guide/conduktor-in-production/deploy-artifacts/deploy-gateway/listener-security#security-mode) `GATEWAY_MANAGED` and SNI routing. | | **Kafka** | Yes | Required by both Gateway and Console. | | **Conduktor Console** | No | UI and API for managing Kafka resources. | | **PostgreSQL** | No | Stores Console state. Required for Console | | **Conduktor Cortex** | No | Metrics collection for Console. | | **Schema Registry** | No | Schema management for Gateway and Console. | | **HashiCorp Vault** | No | Secret storage for Gateway encryption features. | | **MinIO S3** | No | S3-compatible storage for metrics. | | **Prometheus and Grafana** | No | Monitoring dashboards for Gateway and Console. | Gateway will only start if a valid license is provided (version 3.18+). If you’d like to evaluate Gateway, [contact us](https://www.conduktor.io/contact). ### Helm values Inspect the [helm values for Gateway](https://github.com/conduktor/conduktor-reference-architecture/blob/main/local-stack/gateway-values.yaml). The sensitive configurations are provided by reference to a [Kubernetes Secret](https://github.com/conduktor/conduktor-reference-architecture/blob/main/local-stack/gateway-secrets.yaml). In production, manage secrets with a dedicated secret manager. Don't store them unencrypted in a git repository. ## Preserving client IP address By default, the Kubernetes load balancer changes the client IP address to its own. If you need Gateway to log the actual client IP address, add [externalTrafficPolicy](https://kubernetes.io/docs/reference/networking/virtual-ips/#traffic-policies) to the Gateway Helm chart: ```yaml theme={null} service: external: extraSpecs: externalTrafficPolicy: Local ``` This is needed if you need to identify a client that failed to connect during handshake. For example in this log message: ``` [WARN ] [ProxyChannelInitializer:109] - TLS handshake failed [fecd5b8b]: SslHandshakeCompletionEvent(java.nio.channels.ClosedChannelException) on source IP address /172.16.160.44:59321 ``` ## Next steps * [Configure environment variables](/guide/conduktor-in-production/deploy-artifacts/deploy-gateway/environment-variables) to tune Gateway for your environment * Inspect the full Helm [values.yaml](https://github.com/conduktor/conduktor-public-charts/blob/main/charts/gateway/values.yaml) * [Set up Interceptors](/guide/reference/interceptor-reference) to apply policies to your traffic * [Configure listener security](/guide/conduktor-in-production/deploy-artifacts/deploy-gateway/listener-security) to define how Kafka clients authenticate to Gateway * [Hands-on tutorial: Deploy Conduktor Gateway with Kubernetes and Host-based Routing](https://github.com/conduktor/conduktor-gateway-kubernetes-tutorial/) with walkthrough video ## Chart dependencies All charts in this repository depend on [`bitnami-common`](https://github.com/bitnami/charts/tree/main/bitnami/common) . ## Compatibility matrix This compatibility matrix is a resource to help you find which versions of Conduktor Gateway work on which version of our Conduktor Gateway Helm chart. > We recommend you use the version of Gateway that comes pre-configured with the Helm chart. You can adjust the version in your values property according to the supported Gateway version, if required. > Notes column only lists **chart-level changes**. See Conduktor [release notes](https://docs.conduktor.io/changelog/) to determine whether there are breaking changes within the artifacts. ### Helm chart compatibility Breaking changes: 🟡 - breaks additional services / small behavior changes (e.g. Grafana dashboard changes) 🔴 - breaks overall deployment of the product (e.g. renaming variables in .values, major product releases) {/* COMPAT_MATRIX:gateway */} | Chart version | Default App Version | Min App Version | Release date | Notes | | ---------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------- | --------------------------------------------------- | ------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | [conduktor-gateway-3.21.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.21.1) | **[3.20.0](/guide/release-notes#gateway-3-20-0)** | [3.18.0](/guide/release-notes#gateway-3-18-0) | 2026-06-29 | | | [conduktor-gateway-3.21.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.21.0) | **[3.20.0](/guide/release-notes#gateway-3-20-0)** | [3.18.0](/guide/release-notes#gateway-3-18-0) | 2026-06-17 | 🔴 [Deprecated gateway.portRange in favour of gateway.listeners - old gateway.portRange needs gateway.portRange.enable = true to work](https://github.com/conduktor/conduktor-public-charts/pull/283) | | [conduktor-gateway-3.20.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.20.1) | **[3.19.1](/guide/release-notes#gateway-3-19-1)** | [3.18.0](/guide/release-notes#gateway-3-18-0) | 2026-06-11 | | | [conduktor-gateway-3.20.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.20.0) | **[3.19.1](/guide/release-notes#gateway-3-19-1)** | [3.18.0](/guide/release-notes#gateway-3-18-0) | 2026-05-27 | | | [conduktor-gateway-3.19.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.19.1) | **[3.19.1](/guide/release-notes#gateway-3-19-1)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2026-05-26 | | | [conduktor-gateway-3.19.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.19.0) | **[3.19.0](/guide/release-notes#gateway-3-19-0)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2026-05-05 | | | [conduktor-gateway-3.18.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.18.0) | **[3.18.0](/guide/release-notes#gateway-3-18-0)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2026-03-18 | | | [conduktor-gateway-3.17.2](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.17.2) | **[3.17.2](/guide/release-notes#gateway-3-17-2)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2026-02-19 | | | [conduktor-gateway-3.17.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.17.1) | **[3.17.1](/guide/release-notes#gateway-3-17-1)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2026-02-10 | | | [conduktor-gateway-3.17.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.17.0) | **[3.17.0](/guide/release-notes#gateway-3-17-0)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2026-01-29 | | | [conduktor-gateway-3.16.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.16.1) | **[3.16.0](/guide/release-notes#gateway-3-16-0)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2026-01-08 | | | [conduktor-gateway-3.16.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.16.0) | **[3.16.0](/guide/release-notes#gateway-3-16-0)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2025-12-12 | | | [conduktor-gateway-3.15.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.15.0) | **[3.15.0](/guide/release-notes#gateway-3-15-0)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2025-11-17 | | | [conduktor-gateway-3.14.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.14.0) | **[3.14.0](/guide/release-notes#gateway-3-14-0)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2025-10-27 | | | [conduktor-gateway-3.13.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.13.0) | **[3.13.0](/guide/release-notes#gateway-3-13-0)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2025-10-01 | 🟡 [Added podAntiAffinity default preset](https://github.com/conduktor/conduktor-public-charts/pull/226) | | [conduktor-gateway-3.12.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.12.1) | **[3.12.0](/guide/release-notes#gateway-3-12-0)** | [3.12.0](/guide/release-notes#gateway-3-12-0) | 2025-08-22 | 🔴 [Updated startupProbe, livenessProbe, readinessProbe endpoints](https://github.com/conduktor/conduktor-public-charts/pull/214) | | [conduktor-gateway-3.12.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.12.0) | **[3.12.0](/guide/release-notes#gateway-3-12-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-08-22 | | | [conduktor-gateway-3.11.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.11.0) | **[3.11.0](/guide/release-notes#gateway-3-11-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-07-22 | | | [conduktor-gateway-3.10.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.10.0) | **[3.10.0](/guide/release-notes#gateway-3-10-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-06-19 | 🔴 The default value of the environment variable `GATEWAY_ACL_ENABLED` has been switched to `true`
🔴 Deprecated `DELEGATED_SASL_PLAINTEXT` and `DELEGATED_SASL_SSL` security protocols (they remain supported for backward compatibility)
[Find out more from release notes](https://docs.conduktor.io/changelog/#gateway-3100). | | [conduktor-gateway-3.9.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.9.1) | **[3.9.0](/guide/release-notes#gateway-3-9-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-06-02 | | | [conduktor-gateway-3.9.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.9.0) | **[3.9.0](/guide/release-notes#gateway-3-9-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-05-14 | 🔴 When using PLAIN tokens, Gateway service accounts are now always required
🔴 When using PLAIN tokens, Gateway JWT signing key must always be set | | [conduktor-gateway-3.8.2](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.8.2) | **[3.8.1](/guide/release-notes/archive#gateway-3-8-1)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-04-24 | | | [conduktor-gateway-3.8.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.8.1) | **[3.8.0](/guide/release-notes/archive#gateway-3-8-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-04-10 | | | [conduktor-gateway-3.8.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.8.0) | **[3.8.0](/guide/release-notes/archive#gateway-3-8-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-04-09 | | | [conduktor-gateway-3.7.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.7.1) | **[3.7.0](/guide/release-notes/archive#gateway-3-7-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-03-28 | | | [conduktor-gateway-3.7.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.7.0) | **[3.7.0](/guide/release-notes/archive#gateway-3-7-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-03-21 | 🟡 [Updated Grafana template](https://github.com/conduktor/conduktor-public-charts/pull/160)
🟡 [Removed dependency on in-built Kafka cluster](https://github.com/conduktor/conduktor-public-charts/pull/154) . Now the chart checks that the `KAFKA_BOOTSTRAP_SERVERS` environment variable is set in `gateway.extraSecretEnvVars` or `gateway.env` before deploying the chart. | | [conduktor-gateway-3.6.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.6.1) | **[3.6.1](/guide/release-notes/archive#gateway-3-6-1)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-03-06 | | | [conduktor-gateway-3.6.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.6.0) | **[3.6.0](/guide/release-notes/archive#gateway-3-6-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-02-17 | | | [conduktor-gateway-3.5.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.5.1) | **[3.5.2](/guide/release-notes/archive#gateway-3-5-2)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2025-01-23 | | | [conduktor-gateway-3.5.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.5.0) | **[3.5.0](/guide/release-notes/archive#gateway-3-5-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2024-12-16 | | | [conduktor-gateway-3.4.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.4.1) | **[3.4.0](/guide/release-notes/archive#gateway-3-4-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2024-11-22 | | | [conduktor-gateway-3.4.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.4.0) | **[3.4.0](/guide/release-notes/archive#gateway-3-4-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2024-11-22 | 🔴 [Changed service account creation behavior](https://github.com/conduktor/conduktor-public-charts/pull/125)
🟡 [Updated Grafana template](https://github.com/conduktor/conduktor-public-charts/pull/123) | | [conduktor-gateway-3.3.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.3.1) | **[3.3.1](/guide/release-notes/archive#gateway-3-3-1)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2024-09-27 | | | [conduktor-gateway-3.3.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.3.0) | **[3.3.0](/guide/release-notes/archive#gateway-3-3-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2024-09-05 | | | [conduktor-gateway-3.2.2](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.2.2) | **[3.2.2](/guide/release-notes/archive#gateway-3-2-2)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2024-08-28 | 🟡 [Updated Grafana template](https://github.com/conduktor/conduktor-public-charts/pull/98) | | [conduktor-gateway-3.2.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.2.1) | **[3.2.1](/guide/release-notes/archive#gateway-3-2-1)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2024-08-01 | | | [conduktor-gateway-3.2.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.2.0) | **[3.2.0](/guide/release-notes/archive#gateway-3-2-0)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2024-07-19 | | | [conduktor-gateway-3.1.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.1.1) | **[3.1.1](/guide/release-notes/archive#gateway-3-1-1)** | [3.1.0](/guide/release-notes/archive#gateway-3-1-0) | 2024-06-21 | | | [conduktor-gateway-3.1.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.1.0) | **[3.0.3](/guide/release-notes/archive#gateway-3-0-3)** | [3.0.0](/guide/release-notes/archive#gateway-3-0-0) | 2024-06-12 | 🟡 [Updated Grafana template](https://github.com/conduktor/conduktor-public-charts/pull/81) | | [conduktor-gateway-3.0.1](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.0.1) | **[3.0.1](/guide/release-notes/archive#gateway-3-0-1)** | [3.0.0](/guide/release-notes/archive#gateway-3-0-0) | 2024-04-15 | | | [conduktor-gateway-3.0.0](https://github.com/conduktor/conduktor-public-charts/releases/tag/conduktor-gateway-3.0.0) | **[3.0.0](/guide/release-notes/archive#gateway-3-0-0)** | [3.0.0](/guide/release-notes/archive#gateway-3-0-0) | 2024-04-05 | 🔴 [Major product update](https://github.com/conduktor/conduktor-public-charts/pull/56) |