Start with the requirement

Start with what must be close to the private service, data, model, key, or hardware. Then choose the smallest useful setup:

one model or key        gateway
one published resource remote binding
one operation           Worker command
several services        Stack
Helm-owned application  Remote Operator

• one operation: a Worker and a Command;
• one customer-owned model or key: AI Gateway or Encryption Gateway;
• one customer-owned resource: Remote bindings;
• an application and its resources together: Stacks;
• an existing Kubernetes installation: Remote operator.