Upgrade with Helm
Follow this guide to upgrade and configure an Istio mesh using Helm for in-depth evaluation. This guide assumes you have already performed an installation with Helm for a previous minor or patch version of Istio.
This feature is currently considered alpha.
Perform any necessary platform-specific setup.
Check the Requirements for Pods and Services.
Install a Helm client with a version higher than 3.1.1.
The commands in this guide use the Helm charts that are included in the Istio release package located at
Change directory to the root of the release package and then follow the instructions below.
Before upgrading Istio, it is recommended to run the
istioctl x precheck command to make sure the upgrade is compatible with your environment.
$ istioctl x precheck ✔ No issues found when checking the cluster. Istio is safe to install or upgrade! To get started, check out https://istio.io/latest/docs/setup/getting-started/
Create a backup
Before upgrading Istio in your cluster, we recommend creating a backup of your custom configurations, and restoring it from backup if necessary:
$ kubectl get istio-io --all-namespaces -oyaml > "$HOME"/istio_resource_backup.yaml
You can restore your custom configuration like this:
$ kubectl apply -f "$HOME"/istio_resource_backup.yaml
Canary upgrade (recommended)
You can install a canary version of Istio control plane to validate that the new version is compatible with your existing configuration and data plane using the steps below:
Install a canary version of the Istio discovery chart by setting the revision value:
$ helm install istiod-canary manifests/charts/istio-control/istio-discovery \ --set revision=canary \ -n istio-system
Verify that you have two versions of
istiodinstalled in your cluster:
$ kubectl get pods -l app=istiod -L istio.io/rev -n istio-system NAME READY STATUS RESTARTS AGE REV istiod-5649c48ddc-dlkh8 1/1 Running 0 71m default istiod-canary-9cc9fd96f-jpc7n 1/1 Running 0 34m canary
Follow the steps here to test or migrate existing workloads to use the canary control plane.
Once you have verified and migrated your workloads to use the canary control plane, you can uninstall your old control plane:
$ helm delete istiod -n istio-system
In place upgrade
You can perform an in place upgrade of Istio in your cluster using the Helm upgrade workflow.
Upgrade the Istio base chart:
$ helm upgrade istio-base manifests/charts/base -n istio-system
Upgrade the Istio discovery chart:
$ helm upgrade istiod manifests/charts/istio-control/istio-discovery \ -n istio-system
(Optional) Upgrade the Istio ingress or egress gateway charts if installed in your cluster:
$ helm upgrade istio-ingress manifests/charts/gateways/istio-ingress \ -n istio-system $ helm upgrade istio-egress manifests/charts/gateways/istio-egress \ -n istio-system
Please refer to the uninstall section in our Helm install guide.