DOCS-353: Update Gateway image documentation for unified chart defaults and overrides

docs/Akeyless Gateway/deploy-gateway/gateway-deploy-kubernetes-helm/gateway-kubernetes-helm-values-reference.md

@@ -361,15 +361,33 @@ encryptionKeyExistingSecret:
 
 More options for using K8s Secrets can be found directly within the chart values file.
 
+### Gateway Image Defaults and Override
+
+In the unified Gateway chart, the default Gateway deployment image is `gw`.
+
+To override the default and use the `base` image, set the Gateway image repository and tag explicitly:
+
+```yaml values.yaml
+gateway:
+  deployment:
+    image:
+      repository: akeyless/base
+      tag: latest # use latest-akeyless for non-root
+```
+
+When working with white-label environments, prefer Docker Hub repositories over `docker.registry-2.akeyless.io`.
+
 ### Fixed Artifact Repository
 
 In some environments where an IP address must be whitelisted, to pull Akeyless official artifacts as part of your Gateway deployment, uncomment the `fixedArtifactRepository: "artifacts.site2.akeyless.io"` setting in your chart:
 
-```yaml
-image:
-  repository: akeyless/base
-  pullPolicy: Always
-  tag: latest
+```yaml values.yaml
+gateway:
+  deployment:
+    image:
+      repository: akeyless/gw
+      pullPolicy: Always
+      tag: latest
 fixedArtifactRepository: "artifacts.site2.akeyless.io"
 ```
 
@@ -392,13 +410,15 @@ kubectl get pod <gateway-pod> -n <namespace> -o jsonpath="{.spec.containers[*].i
 
 You can explicitly provide the Kubernetes Secret name that contains the credentials for the private registry if needed using the `imagePullSecrets` setting:
 
-```yaml
-image:
-  repository: akeyless/base
-  pullPolicy: Always
-  tag: latest
-  imagePullSecrets:
-    - name: regcred
+```yaml values.yaml
+gateway:
+  deployment:
+    image:
+      repository: akeyless/gw
+      pullPolicy: Always
+      tag: latest
+      imagePullSecrets:
+        - name: regcred
 
 fixedArtifactRepository: "artifacts.site2.akeyless.io"
 ```

docs/Akeyless Gateway/deploy-gateway/gateway-deploy-kubernetes-helm/index.md

@@ -477,6 +477,19 @@ TLSConf:
 
 ## Upgrade Gateway
 
+> ❗ **Important:**
+>
+> Unified Gateway chart upgrades use the `gw` image by default.
+> If an existing deployment requires `akeyless/base`, set an explicit override in your `values.yaml` before running `helm upgrade`:
+>
+> ```yaml values.yaml
+> gateway:
+>   deployment:
+>     image:
+>       repository: akeyless/base
+>       tag: latest # use latest-akeyless for non-root
+> ```
+
 To upgrade your Gateway, when working with a specific version, first edit the version in your `values.yaml` file for example:
 
 ```yaml

docs/Getting Started/getting-started-quickstarts/gateway-k8s-quickstart/index.md

@@ -78,6 +78,11 @@ helm show values akeyless/akeyless-gateway --version "1.13.1" > values.yaml
 
 There should be no command output.
 
+> ℹ️ **Note:**
+>
+> In the unified Gateway chart, the default deployment image is `gw`.
+> If a deployment must use `akeyless/base`, set an explicit image override in `values.yaml` as documented in [Gateway Kubernetes Helm Values Reference](https://docs.akeyless.io/docs/gateway-kubernetes-helm-values-reference#gateway-image-defaults-and-override).
+
 ## Step 4: Create Secret for Access Key
 
 1. Replace `<Access-Key>` in the command below with the Access Key value of your API Key.