KubeadaptDocsBack to site
Sign inStart free
DocsAPI ReferenceCLI
  • Introduction
  • Getting Started
  • Capabilities
    • Overview
    • Agent Configuration
    • eBPF Agent
    • Auto-Upgrade
Docs homev1ConfigurationAuto Upgrade

Configuration

Auto-Upgrade

View source

Automatic updates for the Kubeadapt agent. Covers the update model, configuration, upgrade policies, and release channels.


When enabled, a sidecar runs alongside the agent and periodically checks for new chart versions. If a safe upgrade path exists, it applies the update and reports the result to the dashboard.

Why Auto-Upgrade

Keeping Kubeadapt up to date across a handful of clusters is manageable. At 20+ clusters it becomes a maintenance tax that scales linearly with your fleet and adds zero business value.

Auto-upgrade eliminates that overhead. Every cluster checks for updates independently, upgrades itself on its own schedule, and reports the result back to the dashboard. You get a single view of all cluster versions and upgrade history.

Enable It

yaml
agent:
  autoUpgrade:
    enabled: true

Or at install time:

bash
helm install kubeadapt kubeadapt/kubeadapt \
  --namespace kubeadapt \
  --create-namespace \
  --set agent.config.token="<your-token>" \
  --set agent.autoUpgrade.enabled=true

The Update Model

Prevention over recovery.

Kubeadapt tracks every chart release and which previous versions can safely upgrade to it. Each cluster's upgrade options are filtered by your upgrade policy, channel, and detected cloud provider.

On each check, the cluster asks Kubeadapt "what should I upgrade to?", gets a target version (or nothing), and applies the update. The operation is atomic and locked; no other process can modify the chart release until the cycle completes. If the upgrade fails, Helm rolls back automatically.

Note

The upgrade uses --reset-then-reuse-values instead of --reuse-values. New chart defaults take effect while your explicit overrides (like agent.config.token) are preserved. When you upgrade manually, pass the same flag to get the same behavior.

Blocked versions

If a released version turns out to have a bug, it's removed from the available paths. Clusters that have not yet upgraded never see that version. Clusters already on the bad version get a path that skips over it on the next check. The fix ships as a new version that all affected clusters pick up automatically.

Multi-hop upgrades

When the gap between current and target is large, Kubeadapt returns a sequential path: 0.17.0 -> 0.18.0 -> 0.18.5. One hop is applied per check cycle, ensuring each intermediate version's defaults are applied in order.

Platform-aware updates

Your cloud provider (EKS, AKS, GKE, or on-premise) is auto-detected at startup. Kubeadapt uses it to scope versions by environment, so your clusters only receive patches relevant to them.

Configuration

All values live under agent.autoUpgrade.

ValueTypeDefaultDescription
enabledboolfalseEnable the auto-upgrade sidecar.
checkIntervalstring"24h"How often to check for updates.
dryRunboolfalseDetect updates and log them without applying.

Upgrade Policy

ValueTypeDefaultDescription
policystring"minor"Controls which versions to upgrade to.
  • patch : Only patch versions. 0.17.0 can upgrade to 0.17.1 but not 0.18.0.
  • minor : Minor and patch versions. 0.17.0 can upgrade to 0.18.0. This is the default.
  • all : All versions including major. Use with caution since major versions may contain breaking changes.

Release Channel

ValueTypeDefaultDescription
channelstring"fast"Release channel to follow.
  • fast : New features ship here first. Currently the default.
  • stable : Production-ready releases with additional soak time. Will become the default after v1.
Note

Both channels receive security fixes. We have not released a v1 chart yet, so all releases currently go through fast. Once v1 ships, stable will become the default channel.

Monitoring

Every upgrade attempt is visible in the dashboard under Clusters > Connectivity > Upgrade History.

Warning

The auto-upgrade service account has write access to the kubeadapt namespace. If you bring your own service account, make sure it has the required RBAC permissions listed in the generated ClusterRole.

Full Values Reference

The sections above cover what you need for enabling auto-upgrade and choosing your policy. For other configurations, see the full values.yaml.

PreviouseBPF AgentConfigurationNextCost modesReference

On this page

  • Why Auto-Upgrade
  • Enable It
  • The Update Model
  • Blocked versions
  • Multi-hop upgrades
  • Platform-aware updates
  • Configuration
  • Upgrade Policy
  • Release Channel
  • Monitoring
  • Full Values Reference
Edit this page
Kubeadapt

Kubernetes FinOps platform. Cost visibility, rightsizing, and capacity planning that pays for itself in 30 days.

Product

  • Cost Monitoring
  • Cost Attribution
  • Workload Rightsizing
  • Recommendations
  • Smart Alerting
  • Best Practices
  • Network Cross-AZ

Resources

  • Documentation
  • Status Page
  • Feature Requests

Company

  • About Us
  • Security
  • Careers
  • Contact

© 2026 Kubeadapt. All rights reserved.

PrivacyTermsSecurity