docs(gateway): document helm template CRD install to avoid 1MB secret limit

Author: roulettedares

docs/guide/gateway/gateway.md

@@ -18,19 +18,33 @@ The LBC is built for Gateway API version v1.5.0.
 * For `ip` target type:
     * Pods have native AWS VPC networking configured. For more information, see the [Amazon VPC CNI plugin](https://github.com/aws/amazon-vpc-cni-k8s#readme) documentation.
 * Installation of Gateway API CRDs — choose one of:
-    * **Helm (recommended):** enable via Helm values when installing or upgrading the chart:
-        ```yaml
-        crds:
-          gatewayAPI:
-            standard:
-              enabled: true   # required for L7 (HTTPRoute, GRPCRoute)
-            experimental:
-              enabled: true   # optional, required for L4 (TCPRoute, UDPRoute, TLSRoute)
+    * **`helm template` (recommended):** render the chart locally and pipe into `kubectl apply --server-side`. This installs CRDs without creating a Helm release secret, bypassing the 1 MB limit that causes `helm install`/`helm upgrade` to fail when CRDs are enabled.
+
+        Standard channel only (required for L7 — HTTPRoute, GRPCRoute):
+        ```bash
+        helm template aws-load-balancer-controller eks/aws-load-balancer-controller \
+          --set crds.gatewayAPI.standard.enabled=true \
+          --include-crds \
+          | kubectl apply --server-side -f -
         ```
+
+        Standard + experimental (also enables L4 — TCPRoute, UDPRoute, TLSRoute):
+        ```bash
+        helm template aws-load-balancer-controller eks/aws-load-balancer-controller \
+          --set crds.gatewayAPI.standard.enabled=true \
+          --set crds.gatewayAPI.experimental.enabled=true \
+          --include-crds \
+          | kubectl apply --server-side -f -
+        ```
+
     * **Manual:** apply directly from the upstream release:
-        * Standard: `kubectl apply --server-side=true -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.5.0/standard-install.yaml` [REQUIRED]
-        * Experimental: `kubectl apply --server-side=true -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.5.0/experimental-install.yaml` [OPTIONAL: Used for L4 Routes]
-* Installation of LBC Gateway API specific CRDs: `kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/refs/heads/main/config/crd/gateway/gateway-crds.yaml`
+        * Standard: `kubectl apply --server-side -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.5.0/standard-install.yaml` [REQUIRED]
+        * Experimental: `kubectl apply --server-side -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.5.0/experimental-install.yaml` [OPTIONAL: Used for L4 Routes]
+
+* Installation of LBC Gateway API specific CRDs:
+    ```bash
+    kubectl apply --server-side -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/refs/heads/main/config/crd/gateway/gateway-crds.yaml
+    ```
 
 
 ## Upgrading Gateway API CRDs