emissary-ingress-logo
  • Docs
  • Install
  • Versions
    • v3.10
    • v3.9
    • v3.8
    • v3.7
    • v3.6
    • v2.5
    • v1.14
  • Versions
    • v3.10
      • Quick Start
      • About
        • Why Emissary?
        • Features and Benefits
        • Frequently Asked Questions
        • Support
        • Alternatives
        • Known Issues
        • Major Changes in Emissary 2.X
        • Major Changes in Emissary 3.X
      • How-to guides
        • Active Health Checking
        • Basic Authentication
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed Tracing with OpenTelemetry and Lightstep
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • HTTP/3 support for Azure Kubernetes Service (AKS)
        • HTTP/3 support for Google Kubernetes Engine (GKE)
        • HTTP/3 with Amazon Elastic Kubernetes Service (EKS) | Emissary
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • Rate Limiting Tutorial
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
              • 2
              • 2.4
              • 2.5
              • 3.4
              • 3.7
              • 3.8
              • 3.9
            • YAML
              • 1.14
              • 2
              • 2.4
              • 2.5
              • 3.4
              • 3.7
              • 3.8
              • 3.9
          • Migration Matrix
          • Bare metal
          • Convert to v3alpha1
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migrate to Emissary 3.x
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • HTTP/3 configuration
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Header-based routing
            • Add request headers
            • Add response headers
            • Remove request headers
            • Remove response headers
            • Host headers
          • Introduction to the Mapping Resource
          • Advanced Mapping configuration
          • Ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Community
    • v3.9
      • About
        • Alternatives
        • Features and Benefits
        • Frequently Asked Questions
        • Known Issues
        • Major Changes in Emissary 2.X
        • Major Changes in Emissary 3.X
        • Support
        • Why Emissary?
      • How-to guides
        • Active Health Checking
        • Basic Authentication
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed Tracing with OpenTelemetry and Lightstep
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • HTTP/3 support for Azure Kubernetes Service (AKS)
        • HTTP/3 support for Google Kubernetes Engine (GKE)
        • HTTP/3 with Amazon Elastic Kubernetes Service (EKS) | Emissary
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • Rate Limiting Tutorial
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
                • 1.14.x to 2.x
              • 2
                • 2.0.x to latest 2.x
              • 2.4
                • 2.4.x to latest 2.x
              • 2.5
                • 2.5.x to latest 3.x
              • 3.4
                • 3.4 to latest 3.x
              • 3.7
                • 3.7.x to latest 3.x
              • 3.8
                • 3.8.x to latest 3.x
            • YAML
              • 1.14
                • 1.14 to latest 2.x
              • 2
                • 2.0 to latest 2.x
              • 2.4
                • 2.4 to latest 2.x
              • 2.5
                • 2.5 to latest 3.x
              • 3.4
                • 3.4.x to latest 3.x
              • 3.7
                • 3.7 to latest 3.x
              • 3.8
                • 3.8 to latest 3.x
          • Bare metal
          • Convert to v3alpha1
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migrate to Emissary 3.x
          • Migration Matrix
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • HTTP/3 configuration
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Getting Started with Emissary
        • Quickstart
      • Community
    • v3.8
      • About
        • Alternatives
        • Emissary End of Life Policy
        • Features and Benefits
        • Frequently Asked Questions
        • Known Issues
        • Major Changes in Emissary 2.X
        • Major Changes in Emissary 3.X
        • Support
        • Why Emissary?
      • How-to guides
        • Active Health Checking
        • Basic Authentication
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed Tracing with OpenTelemetry and Lightstep
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • HTTP/3 support for Azure Kubernetes Service (AKS)
        • HTTP/3 support for Google Kubernetes Engine (GKE)
        • HTTP/3 with Amazon Elastic Kubernetes Service (EKS)
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • Rate Limiting Tutorial
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
                • 1.14.x to 2.x
              • 2
                • 2.0.x to latest 2.x
              • 2.4
                • 2.4.x to latest 2.x
              • 2.5
                • 2.5.x to latest 3.x
              • 3.4
                • 3.4 to latest 3.x
              • 3.7
                • 3.7.x to latest 3.x
            • YAML
              • 1.14
                • 1.14 to latest 2.x
              • 2
                • 2.0 to latest 2.x
              • 2.4
                • 2.4 to latest 2.x
              • 2.5
                • 2.5 to latest 3.x
              • 3.4
                • 3.4.x to latest 3.x
              • 3.7
                • 3.7 to latest 3.x
          • Bare metal
          • Convert to v3alpha1
          • Docker
          • Helm
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migrate to Emissary 3.x
          • Migration Matrix
          • YAML
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • HTTP/3 configuration
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Getting Started with Emissary
        • Quickstart
      • Community
    • v3.7
      • About
        • Alternatives
        • Emissary End of Life Policy
        • Features and Benefits
        • Frequently Asked Questions
        • Known Issues
        • Major Changes in Emissary 2.X
        • Major Changes in Emissary 3.X
        • Support
        • Why Emissary?
      • How-to guides
        • Active Health Checking
        • Basic Authentication
        • Basic Rate Limiting
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed Tracing with OpenTelemetry and Lightstep
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • HTTP/3 support for Azure Kubernetes Service (AKS)
        • HTTP/3 support for Google Kubernetes Engine (GKE)
        • HTTP/3 with Amazon Elastic Kubernetes Service (EKS)
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
                • 1.14.x to 2.x
              • 2
                • 2.0.x to latest 2.x
              • 2.4
                • 2.4.x to latest 2.x
              • 2.5
                • 2.5.x to latest 3.x
              • 3.4
                • 3.4 to latest 3.x
              • 3.7
                • 3.7.x to latest 3.x
            • YAML
              • 1.14
                • 1.14 to latest 2.x
              • 2
                • 2.0 to latest 2.x
              • 2.4
                • 2.4 to latest 2.x
              • 2.5
                • 2.5 to latest 3.x
              • 3.4
                • 3.4.x to latest 3.x
              • 3.7
                • 3.7 to latest 3.x
          • Bare metal
          • Convert to v3alpha1
          • Docker
          • Helm
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migrate to Emissary 3.x
          • Migration Matrix
          • YAML
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • HTTP/3 configuration
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Getting Started with Emissary
        • Quickstart
      • Community
    • v3.6
      • About
        • Alternatives
        • Emissary End of Life Policy
        • Features and Benefits
        • Frequently Asked Questions
        • Known Issues
        • Major Changes in Emissary 2.X
        • Major Changes in Emissary 3.X
        • Support
        • Why Emissary?
      • How-to guides
        • Active Health Checking
        • Basic Authentication
        • Basic Rate Limiting
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • distributed tracing with opentelemetry and lightstep
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • HTTP/3 support for Azure Kubernetes Service (AKS)
        • HTTP/3 support for Google Kubernetes Engine (GKE)
        • HTTP/3 with Amazon Elastic Kubernetes Service (EKS)
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
                • 1.14.x to 2.x
              • 2
                • 2.0.x to latest 2.x
              • 2.4
                • 2.4.x to latest 2.x
              • 2.5
                • 2.5.x to latest 3.x
              • 3.4
                • 3.4 to latest 3.x
              • 3.5
                • 3.5.x to latest 3.x
            • YAML
              • 1.14
                • 1.14 to latest 2.x
              • 2
                • 2.0 to latest 2.x
              • 2.4
                • 2.4 to latest 2.x
              • 2.5
                • 2.5 to latest 3.x
              • 3.4
                • 3.4.x to latest 3.x
              • 3.7
                • 3.7 to latest 3.x
          • Bare metal
          • Convert to v3alpha1
          • Docker
          • Helm
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migrate to Emissary 3.x
          • Migration Matrix
          • YAML
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • HTTP/3 configuration
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Getting Started with Emissary
        • Quickstart
      • Community
    • v2.5
      • About
        • Alternatives
        • Emissary End of Life Policy
        • Features and Benefits
        • Frequently Asked Questions
        • Known Issues
        • Major Changes in Emissary 2.X
        • Support
        • Why Emissary?
      • How-to guides
        • Basic Authentication
        • Basic Rate Limiting
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
                • 1.14.x to 2.x
              • 2
                • 2.0.x to latest 2.x
              • 2.4
                • 2.4.x to latest 2.x
            • YAML
              • 1.14
                • 1.14 to latest 2.x
              • 2
                • 2.0 to latest 2.x
              • 2.3
                • 2.3 to latest 2.x
              • 2.4
                • 2.4 to latest 2.x
          • Bare metal
          • Convert to v3alpha1
          • Docker
          • Helm
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migration Matrix
          • YAML
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Getting Started with Emissary
        • Quickstart
      • Community
    • v1.14
      • About
        • Alternatives
        • Features and Benefits
        • Frequently Asked Questions
        • Support
        • Why Emissary?
      • How-to guides
        • Advanced rate limiting
        • Basic Authentication
        • Basic Authentication
        • Basic rate limiting
        • Client certificate validation
        • Consul integration
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • Istio
        • Knative
        • Kubernetes SSO with OIDC and Keycloak
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Bare metal
          • Docker
          • Helm
          • Install Emissary
          • Integration in community projects
          • The Ambassador Operator
          • Upgrading Emissary
          • YAML
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • Ingress controller
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Customizing Project deployment
          • Gateway API
          • Introduction to the `Project` resource
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Deploying to Kubernetes from Github
        • Dev Portal tutorial
        • Getting Started with Emissary
        • Quickstart
      • Community
View page source Edit this page Create child page Create documentation issue Create project issue
  1. Versions
  2. v3.6
  3. Topics
  4. Install
  5. Upgrade

Upgrade


Helm

YAML

Last modified August 3, 2024: Update all 3.6 resources with appropriate metadata (2d36673)
© 2017–2025

Emissary-ingress Authors

Terms | Privacy | Trademarks | License
All Rights Reserved