Skip to content


Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

Latest commit

Don't upgrade Kubernetes or orjson for now

Signed-off-by: Hamzah Qudsi <>


Failed to load latest commit information.
Latest commit message
Commit time
Jun 17, 2021
Jul 19, 2017
Mar 13, 2019


Version Docker Repository Join Slack Core Infrastructure Initiative: Best Practices

Emissary-Ingress is an open-source Kubernetes-native API Gateway + Layer 7 load balancer + Kubernetes Ingress built on Envoy Proxy. Emissary-ingress is a CNCF incubation project (and was formerly known as Ambassador API Gateway).

Emissary-ingress enables its users to:

See the full list of features here.


(If you are looking at this list on a branch other than master, it may be out of date.)

  • master - branch for Emissary-ingress 3.3.z work (✔️ upcoming release)
  • release/v3.3 - branch for Emissary-ingress 3.3.z work
  • release/v2.5 - branch for Emissary-ingress 2.5.z work (✔️ upcoming release)
  • release/v1.14 - branch for Emissary-ingress 1.14.z work (✔️ maintenance, supported through September 2022)


Emissary is configured via Kubernetes CRDs, or via annotations on Kubernetes Services. Internally, it uses the [Envoy Proxy] to actually handle routing data; externally, it relies on Kubernetes for scaling and resiliency. For more on Emissary's architecture and motivation, read this blog post.

Getting Started

You can get Emissary up and running in just three steps. Follow the instructions here:

If you are looking for a Kubernetes ingress controller, Emissary provides a superset of the functionality of a typical ingress controller. (It does the traditional routing, and layers on a raft of configuration options.) This blog post covers Kubernetes ingress.

For other common questions, view this FAQ page.

You can also use Helm to install Emissary. For more information, see the instructions in the Helm installation documentation


Emissary-ingress is a CNCF Incubating project and welcomes any and all contributors. To get started:

If you're interested in contributing, here are some ways:

The Ambassador Edge Stack is a superset of Emissary-ingress that provides additional functionality including OAuth/OpenID Connect, advanced rate limiting, Swagger/OpenAPI support, integrated ACME support for automatic TLS certificate management, and a cloud-based UI. For more information, visit