Skip to main content

Upgrade Ory Hydra OEL to a newer version

This document provides a comprehensive guide on how to upgrade your Ory Hydra Enterprise License (OEL) version. Upgrading to the latest version ensures you have the newest features, security updates, and performance improvements.

Prerequisites​

Before starting the process, ensure you meet the following requirements:

  • Valid Ory Enterprise License: You must have purchased an Ory Enterprise License.
  • Access to the Ory Enterprise Docker Registry: You need access to download the OEL Docker images.
  • Backup and Testing: Create a backup of your current Ory database if you are upgrading or migrating and test the process on a test environment to ensure compatibility and minimize risks.

Pick the right version​

To upgrade Ory Hydra OEL, you need to know the version you are currently running. Check your Docker or Kubernetes environment to find the tag. You should find your tag in this list down below.

note

Zero-downtime migrations are only possible if you do not skip any version when upgrading.

The list is ordered by date. Pick the newest version from the top of the list to upgrade.

Image TagRelease Date
d4f640cf72989adf24ba153919ede18d4cddc98e2025-05-27
86516686797493772d75d3ab118e2107607b530c2025-05-23
a4de81abb7c19ee1c227aca07d43b5693252003a2025-05-21
e85c1a42ff8bf17f38d9b62abf6e8f33432c7f2a2025-05-16
e4fa9d0244d703c844843fc9a07f2360134128942025-05-05
40a5e4e273445838a7cb10579c0bbcf6b43be51c2025-04-22
2e109bde0929be56c99a1fdfd071cca71cff00272025-04-16
07a33841df96ebce3e61015c63c33ccfa6e245f12025-04-08
f9189059fadf9f4ea7e8961b05d26836673e95ab2025-04-08
50b7f9d3f9b3bfe9258a777bfe96efffdbeb6fd82025-04-01
8825ef2357bc9485f39bbcfd695f2dcab51e2b2f2025-03-31
367fce6d847b7bdba50515705ae75c9c56cbec6a2025-03-27
ba208705029b9a015a72206e348c39bd814fcd0c2025-03-20
25c058e5a20b8524361ecd6f8e185622745c8f792025-03-14
22c323f50880f0227915c536f5eefa106e9387d72025-03-12
b225881c54ea601c1e925f1f142c1ab373336c9c2025-03-11
a670e7889d09bf51ef1e69d29ca61611e1b0e8022025-03-06
3941aaf70247f3d315e545956be38de70b14c0442025-03-04
76b6f8eb08f8371d99109cfc60da26d23bcd8b522025-02-28
429289a6c08b5619c86e34313376b597131108fc2025-02-24
19f3f0fbbfb9cb48788789c47352ce8f582ea64c2025-02-21
569c06b47e9ccd9548afa71d22e7ba4e3b1d5b012025-02-14
e17b2ea61cc69e70f252e384d5ccbac83e504ced2025-02-12
29c1dd6b0b5d0b991019e2730f4efd4fce86fa482025-02-04
35ba5a70b32d69c3b623f312f985f69a54f710292025-01-31
e879d83cd5cc0cba4a0ec3399ef32f252c220b0e2025-01-30
ea5c69132fe43cfe35e2e8f068906a652936d3292025-01-30
9f377c2778e987aaeded444309f61361559d04ea2025-01-22
139630050d4da09c6ea58e937ae923a27aed078f2025-01-16
4e1c5d215f165a3b186b13fbbf3ecf0206fba92d2025-01-16
edabe30a788945411489409852bca93a60e188372025-01-02
f941460ee49d64a9653ba6886700d05c1e729b9d2024-12-24
3c860bb15843a99056e2e9ce469f935a4e68f7902024-12-20
2ec082f971c8a85f325db338e63889017b81bf6f2024-12-18
4de7ed84637c14f9ae3b85175156c837e472ced02024-12-16
6323ac2d73b302898ad2f415b28a0c87293e7eb12024-12-10
a1201e72919f47cb7e6dd0c6eba8db8266ed70452024-11-29
2575b683dcff45af2d18e7ed23a2a7aca3eea5d42024-11-25
94d6dfba9d81c00ff03ad61a0005e93a974a03f72024-11-12
69efdbbb45f642b5b142426a03a255f39e2766892024-11-05
f5eb2f3ae6c3ece3e00dc68c5e8743de7e9f11172024-11-05
83f53137a823ee0ace7e2ae94e7823caa036b8002024-10-17
14f390f978b2ebcdc8e181ac04f9978a397e21d22024-10-11
a22eff120ff38ee4596ed3afddb4ca4307b1adbb2024-10-07
75ade08cd441f43f7771ed4f11417a30ff0b31ac2024-09-27
e2439391378f3abd513fb13847bc6a1b5f0157f12024-09-26
52ebf819f5538176c7ac1c4afc953123e8f0d3bf2024-09-24
c35bfb780da7ddacba23f31b5e1634fa155af9c92024-09-19
20b15ef54f30d3d43a5d04bcdb7fd1d1f3fa28322024-09-10
ce413707a03c4551b3f0bbe2e1e9c929a7e0b0252024-09-05
bf4441cc6dc1f8e8387173ae8f1396395dc1f4332024-08-30
9b96c2507f9f17f639f73c2a9284f32bf63cd9d82024-08-27
1f407d0b2035e50812e6888a71b772530d17fc7a2024-08-12
04858989138f4b09c2b9b9676e3641326d96b1a62024-08-02
0fd87c560867f19ab12276edf258e42c4688454a2024-07-24
470aebc3ab2d4c225ca14ab8b1a12809f51b7eb32024-07-18
73a77968be31cbcba18b02918a8c11343a1fa0382024-07-04
1578667fa246c374ca85c5eadbf49cc53a2967752024-06-26
f832e165e187e49657229902c13ad30c4cf10d0b2024-06-20
f066fc62fc37ee1d28b4f2973faaa2bc098fc9522024-06-18
39bbe4e0d99d40d5c4feb97321fc68b20f02a7ae2024-06-14
f2ead7db68e8af72dbd1ab099fbaa6bf0f0ec8c32024-06-12
897e224960bb8677edf3344bd51c9edd779e9da72024-06-05

Upgrade Using Helm Charts in Kubernetes​

Upgrading Ory Hydra OEL in Kubernetes is straightforward when using Ory's Helm Charts. Follow these steps to upgrade Ory Hydra OEL:

1. Enable auto SQL migration​

Set hydra.automigration.enabled to true in the values.yaml file:

image:
  # ....
# ...
hydra:
  automigration:
    enabled: true
# ...

2. Update the image tag​

image:
  repository: europe-docker.pkg.dev/ory-artifacts/ory-enterprise/hydra-oel
  tag: <replace-with-current-image-tag>
# ...

3. Apply / install the helm chart​

You can now apply the upgrade:

helm upgrade ory-oel-hydra ory/hydra --namespace ory -f values.yaml

4. Wait for the upgrade to propagate​

Once the init container is done and the main container is running, the upgrade is complete.

Upgrade steps without Helm Charts​

1. Check Release Notes​

Before upgrading, review the changelog for the new version to understand the changes, new features, and any deprecations.

2. Backup Your Data​

Ensure you have a complete backup of your database and configuration files. This step is crucial for restoring your system in case of an upgrade failure.

3. Pull the Latest Docker Image​

Pull the latest Ory Hydra OEL Docker image from the Ory Enterprise Docker Registry:

docker pull europe-docker.pkg.dev/ory-artifacts/ory-enterprise/hydra-oel:<new-version-tag>

5. Apply SQL Migrations​

Before deploying the service, you need to apply SQL migrations:

docker run \
  -e DSN=your_database_connection_string \
  europe-docker.pkg.dev/ory-artifacts/ory-enterprise/hydra-oel:<new-version-tag> \
  -- migrate sql up -e -f /path/to/config.yaml

Replace your_database_connection_string with your actual database connection string.

5. Start the Service​

Now you will be able to start the service. In most environments, the release will gracefully rotate pods.

docker run \
  -p 4444:4444 -p 4445:4445 \
  -e DSN=your_database_connection_string \
  europe-docker.pkg.dev/ory-artifacts/ory-enterprise/hydra-oel:<new-version-tag> \
  -- serve all -f /path/to/config.yaml

Replace your_database_connection_string with your actual database connection string.

Conclusion​

Upgrading Ory Hydra OEL is essential to keep your system secure and up-to-date. By following the steps outlined in this guide, you can ensure a smooth upgrade process with minimal downtime.

If you encounter any issues during the upgrade process, please reach out to the Ory support team for assistance.