Skip to main content

Upgrade Ory Oathkeeper OEL to a newer version

Follow this guide when you upgrade Ory Oathkeeper Enterprise License (OEL) to a newer version. Upgrade to the latest version for the newest features, security updates, and performance improvements.

If you encounter any issues during the upgrade process, please reach out to Ory support for assistance.

Prerequisites​

Before starting the process, ensure you meet the following requirements:

  • Valid Ory Enterprise License: You must have purchased an Ory Enterprise License.
  • Access to the Ory Enterprise Docker Registry: You need access to download the OEL Docker images.
  • Backup and Testing: Create a backup of your current Ory database if you are upgrading or migrating and test the process on a test environment to ensure compatibility and minimize risks.

Ory Oathkeeper does not require any database migrations as it does not use a database.

Pick the right version​

To check if there is a newer versions of Ory Oathkeeper OEL, check your Docker or Kubernetes environment to find the tag you are running and compare against this list:

Image TagRelease Date
936e2f934cae31d47939e342dcc1e8c5f6f81fe72025-05-05

The tags are ordered by date. Pick the newest version in the list to upgrade.

Upgrade using helm charts in Kubernetes​

Follow these steps to upgrade Ory Oathkeeper OEL when using Ory's Helm Charts:

Update the image tag​

image:
  repository: europe-docker.pkg.dev/ory-artifacts/ory-enterprise-oathkeeper/oathkeeper-oel
  tag: <replace-with-current-image-tag>
# ...

Apply and install the helm chart​

You can now apply the upgrade:

helm upgrade ory-oel-oathkeeper ory/oathkeeper --namespace ory -f values.yaml