# Guidance needed: upgrading production OpenZiti 1.1.15 on GKE to current LTS

**URL:** <https://openziti.discourse.group/t/guidance-needed-upgrading-production-openziti-1-1-15-on-gke-to-current-lts/6206>\
**Category:** Uncategorized\
**Created:** [October 26, 2026, 11:06am UTC](https://openziti.discourse.group/t/guidance-needed-upgrading-production-openziti-1-1-15-on-gke-to-current-lts/6206 "2026-10-26T11:06:36Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ss\_vinoth22](https://avatars.discourse-cdn.com/v4/letter/s/ecccb3/32.png) [@ss\_vinoth22](https://openziti.discourse.group/u/ss_vinoth22)\
**Post date:** [October 26, 2026, 11:06am UTC](https://openziti.discourse.group/t/guidance-needed-upgrading-production-openziti-1-1-15-on-gke-to-current-lts/6206/1 "2026-10-26T11:06:36Z")

</div>

Hi all,

I'd appreciate guidance on the safest way to upgrade our production OpenZiti network with minimal downtime.

\*\*Current versions (GKE, single non-HA controller):\*\*

- Controller: Ziti 1.1.15 — Helm chart `ziti-controller` 1.1.5

- Routers (public + private): Ziti 1.1.15 — Helm chart `ziti-router` 1.1.3

- Dev controller + router in the same namespace: same versions

- `ziti-console` chart 0.5.3 (app 3.1.0)

- `zrok` chart 0.2.6 (app 0.4.40)

- `ziti-host` chart 1.0.1 (app 1.3.9)

- `ziti-edge-tunnel` chart 0.0.13 (app 0.22.26)

- cert-manager / trust-manager: [subcharts of ziti-controller / separate releases]

- ~500 identities, including ~27 Linux ziti-edge-tunnel IoT devices on pinned versions

\*\*Target:\*\* current 2.0.x LTS.

What upgrade path and steps would you recommend for this setup? Any pitfalls I should watch out for?

Thanks!