emissary-ingress-logo
  • Docs
  • Install
  • Versions
    • v3.10
    • v3.9
    • v3.8
    • v3.7
    • v3.6
    • v2.5
    • v1.14
  • Versions
    • v3.10
      • Quick Start
      • About
        • Why Emissary?
        • Features and Benefits
        • Frequently Asked Questions
        • Support
        • Alternatives
        • Known Issues
        • Major Changes in Emissary 2.X
        • Major Changes in Emissary 3.X
      • How-to guides
        • Active Health Checking
        • Basic Authentication
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed Tracing with OpenTelemetry and Lightstep
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • HTTP/3 support for Azure Kubernetes Service (AKS)
        • HTTP/3 support for Google Kubernetes Engine (GKE)
        • HTTP/3 with Amazon Elastic Kubernetes Service (EKS) | Emissary
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • Rate Limiting Tutorial
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
              • 2
              • 2.4
              • 2.5
              • 3.4
              • 3.7
              • 3.8
              • 3.9
            • YAML
              • 1.14
              • 2
              • 2.4
              • 2.5
              • 3.4
              • 3.7
              • 3.8
              • 3.9
          • Migration Matrix
          • Bare metal
          • Convert to v3alpha1
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migrate to Emissary 3.x
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • HTTP/3 configuration
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Header-based routing
            • Add request headers
            • Add response headers
            • Remove request headers
            • Remove response headers
            • Host headers
          • Introduction to the Mapping Resource
          • Advanced Mapping configuration
          • Ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Community
    • v3.9
      • About
        • Alternatives
        • Features and Benefits
        • Frequently Asked Questions
        • Known Issues
        • Major Changes in Emissary 2.X
        • Major Changes in Emissary 3.X
        • Support
        • Why Emissary?
      • How-to guides
        • Active Health Checking
        • Basic Authentication
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed Tracing with OpenTelemetry and Lightstep
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • HTTP/3 support for Azure Kubernetes Service (AKS)
        • HTTP/3 support for Google Kubernetes Engine (GKE)
        • HTTP/3 with Amazon Elastic Kubernetes Service (EKS) | Emissary
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • Rate Limiting Tutorial
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
                • 1.14.x to 2.x
              • 2
                • 2.0.x to latest 2.x
              • 2.4
                • 2.4.x to latest 2.x
              • 2.5
                • 2.5.x to latest 3.x
              • 3.4
                • 3.4 to latest 3.x
              • 3.7
                • 3.7.x to latest 3.x
              • 3.8
                • 3.8.x to latest 3.x
            • YAML
              • 1.14
                • 1.14 to latest 2.x
              • 2
                • 2.0 to latest 2.x
              • 2.4
                • 2.4 to latest 2.x
              • 2.5
                • 2.5 to latest 3.x
              • 3.4
                • 3.4.x to latest 3.x
              • 3.7
                • 3.7 to latest 3.x
              • 3.8
                • 3.8 to latest 3.x
          • Bare metal
          • Convert to v3alpha1
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migrate to Emissary 3.x
          • Migration Matrix
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • HTTP/3 configuration
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Getting Started with Emissary
        • Quickstart
      • Community
    • v3.8
      • About
        • Alternatives
        • Emissary End of Life Policy
        • Features and Benefits
        • Frequently Asked Questions
        • Known Issues
        • Major Changes in Emissary 2.X
        • Major Changes in Emissary 3.X
        • Support
        • Why Emissary?
      • How-to guides
        • Active Health Checking
        • Basic Authentication
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed Tracing with OpenTelemetry and Lightstep
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • HTTP/3 support for Azure Kubernetes Service (AKS)
        • HTTP/3 support for Google Kubernetes Engine (GKE)
        • HTTP/3 with Amazon Elastic Kubernetes Service (EKS)
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • Rate Limiting Tutorial
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
                • 1.14.x to 2.x
              • 2
                • 2.0.x to latest 2.x
              • 2.4
                • 2.4.x to latest 2.x
              • 2.5
                • 2.5.x to latest 3.x
              • 3.4
                • 3.4 to latest 3.x
              • 3.7
                • 3.7.x to latest 3.x
            • YAML
              • 1.14
                • 1.14 to latest 2.x
              • 2
                • 2.0 to latest 2.x
              • 2.4
                • 2.4 to latest 2.x
              • 2.5
                • 2.5 to latest 3.x
              • 3.4
                • 3.4.x to latest 3.x
              • 3.7
                • 3.7 to latest 3.x
          • Bare metal
          • Convert to v3alpha1
          • Docker
          • Helm
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migrate to Emissary 3.x
          • Migration Matrix
          • YAML
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • HTTP/3 configuration
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Getting Started with Emissary
        • Quickstart
      • Community
    • v3.7
      • About
        • Alternatives
        • Emissary End of Life Policy
        • Features and Benefits
        • Frequently Asked Questions
        • Known Issues
        • Major Changes in Emissary 2.X
        • Major Changes in Emissary 3.X
        • Support
        • Why Emissary?
      • How-to guides
        • Active Health Checking
        • Basic Authentication
        • Basic Rate Limiting
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed Tracing with OpenTelemetry and Lightstep
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • HTTP/3 support for Azure Kubernetes Service (AKS)
        • HTTP/3 support for Google Kubernetes Engine (GKE)
        • HTTP/3 with Amazon Elastic Kubernetes Service (EKS)
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
                • 1.14.x to 2.x
              • 2
                • 2.0.x to latest 2.x
              • 2.4
                • 2.4.x to latest 2.x
              • 2.5
                • 2.5.x to latest 3.x
              • 3.4
                • 3.4 to latest 3.x
              • 3.7
                • 3.7.x to latest 3.x
            • YAML
              • 1.14
                • 1.14 to latest 2.x
              • 2
                • 2.0 to latest 2.x
              • 2.4
                • 2.4 to latest 2.x
              • 2.5
                • 2.5 to latest 3.x
              • 3.4
                • 3.4.x to latest 3.x
              • 3.7
                • 3.7 to latest 3.x
          • Bare metal
          • Convert to v3alpha1
          • Docker
          • Helm
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migrate to Emissary 3.x
          • Migration Matrix
          • YAML
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • HTTP/3 configuration
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Getting Started with Emissary
        • Quickstart
      • Community
    • v3.6
      • About
        • Alternatives
        • Emissary End of Life Policy
        • Features and Benefits
        • Frequently Asked Questions
        • Known Issues
        • Major Changes in Emissary 2.X
        • Major Changes in Emissary 3.X
        • Support
        • Why Emissary?
      • How-to guides
        • Active Health Checking
        • Basic Authentication
        • Basic Rate Limiting
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • distributed tracing with opentelemetry and lightstep
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • HTTP/3 support for Azure Kubernetes Service (AKS)
        • HTTP/3 support for Google Kubernetes Engine (GKE)
        • HTTP/3 with Amazon Elastic Kubernetes Service (EKS)
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
                • 1.14.x to 2.x
              • 2
                • 2.0.x to latest 2.x
              • 2.4
                • 2.4.x to latest 2.x
              • 2.5
                • 2.5.x to latest 3.x
              • 3.4
                • 3.4 to latest 3.x
              • 3.5
                • 3.5.x to latest 3.x
            • YAML
              • 1.14
                • 1.14 to latest 2.x
              • 2
                • 2.0 to latest 2.x
              • 2.4
                • 2.4 to latest 2.x
              • 2.5
                • 2.5 to latest 3.x
              • 3.4
                • 3.4.x to latest 3.x
              • 3.7
                • 3.7 to latest 3.x
          • Bare metal
          • Convert to v3alpha1
          • Docker
          • Helm
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migrate to Emissary 3.x
          • Migration Matrix
          • YAML
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • HTTP/3 configuration
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Getting Started with Emissary
        • Quickstart
      • Community
    • v2.5
      • About
        • Alternatives
        • Emissary End of Life Policy
        • Features and Benefits
        • Frequently Asked Questions
        • Known Issues
        • Major Changes in Emissary 2.X
        • Support
        • Why Emissary?
      • How-to guides
        • Basic Authentication
        • Basic Rate Limiting
        • Client certificate validation
        • Configuring Emissary Communications
        • Consul integration
        • Developing custom filters for routing
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • Istio
        • Knative
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • Protecting Access to the Diagnostics Interface
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Upgrade
            • Helm
              • 1.14
                • 1.14.x to 2.x
              • 2
                • 2.0.x to latest 2.x
              • 2.4
                • 2.4.x to latest 2.x
            • YAML
              • 1.14
                • 1.14 to latest 2.x
              • 2
                • 2.0 to latest 2.x
              • 2.3
                • 2.3 to latest 2.x
              • 2.4
                • 2.4 to latest 2.x
          • Bare metal
          • Convert to v3alpha1
          • Docker
          • Helm
          • Integration to community projects
          • Migrate to Emissary 2.x
          • Migration Matrix
          • YAML
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • Ingress controller
          • Listener CRD
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Gateway API
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Getting Started with Emissary
        • Quickstart
      • Community
    • v1.14
      • About
        • Alternatives
        • Features and Benefits
        • Frequently Asked Questions
        • Support
        • Why Emissary?
      • How-to guides
        • Advanced rate limiting
        • Basic Authentication
        • Basic Authentication
        • Basic rate limiting
        • Client certificate validation
        • Consul integration
        • Distributed Tracing
        • Distributed Tracing with Datadog
        • Distributed tracing with Zipkin
        • ExternalDNS
        • gRPC
        • Istio
        • Knative
        • Kubernetes SSO with OIDC and Keycloak
        • Linkerd 2
        • Mapping resource
        • Monitoring with Prometheus and Grafana
        • TLS Termination and Enabling HTTPS
        • Using cert-manager
        • WebSockets
      • Topics
        • Core Concepts
          • Architecture
          • Kubernetes Network Architecture
          • Microservices & API gateways
          • Operating Model
          • Progressive Delivery
          • Rate limiting at the edge
        • Install
          • Bare metal
          • Docker
          • Helm
          • Install Emissary
          • Integration in community projects
          • The Ambassador Operator
          • Upgrading Emissary
          • YAML
        • Running
          • Services
            • Authentication service
            • ExtAuth protocol
            • Log Service
            • Rate limit service
            • Tracing service
          • Statistics and monitoring
            • Envoy statistics with StatsD
            • The metrics endpoint
          • Transport Layer Security (TLS)
            • Cleartext support
            • Mutual TLS (mTLS)
            • Server Name Indication (SNI)
            • TLS Origination
          • Ambassador Module
          • AWS
          • Custom error responses
          • Debugging
          • Deployment architecture
          • Diagnostics
          • Environment Variables
          • GKE
          • Gzip compression
          • Host CRD
          • Ingress controller
          • Load balancing
          • Performance and scaling
          • Running and deployment
          • Service discovery and resolvers
        • Using
          • Headers
            • Add request headers
            • Add response headers
            • Header-based routing
            • Host headers
            • Remove request headers
            • Remove response headers
          • Advanced Mapping configuration
          • ambassador module defaults
          • AuthService settings
          • Automatic retries
          • Basic rate limiting
          • Canary releases
          • Circuit breakers
          • Cross-Origin Resource Sharing (CORS)
          • Customizing Project deployment
          • Gateway API
          • Introduction to the `Project` resource
          • Introduction to the Mapping Resource
          • Keepalive
          • Method-based routing
          • Prefix regex
          • Query parameter-based routing
          • Redirects
          • Rewrites
          • TCPMapping resources
          • Timeouts
          • Traffic shadowing
      • Tutorials
        • Deploying to Kubernetes from Github
        • Dev Portal tutorial
        • Getting Started with Emissary
        • Quickstart
      • Community
View page source Edit this page Create child page Create documentation issue Create project issue
  1. Versions
  2. v3.8
  3. Topics
  4. Install
  5. Upgrade
  6. YAML
  7. 2

2


2.0 to latest 2.x

Last modified July 4, 2024: Fix all metadata for 3.8 for navigation (7c97b54)
© 2017–2025

Emissary-ingress Authors

Terms | Privacy | Trademarks | License
All Rights Reserved