--- title: Teleport Automatic Agent Updates | daily.dev description: Teleport 13 introduces automatic agent updates for Teleport agents and Teleport Kubernetes Agents, eliminating manual per-agent upgrades. Admins set a... canonical: https://daily.dev/posts/teleport-automatic-agent-updates-d4mqtnxoc twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Teleport Automatic Agent Updates | daily.dev og:description: Teleport 13 introduces automatic agent updates for Teleport agents and Teleport Kubernetes Agents, eliminating manual per-agent upgrades. Admins set a... og:url: https://daily.dev/posts/teleport-automatic-agent-updates-d4mqtnxoc og:image: https://api.daily.dev/og/posts/D4mqTNxOC.png og:image:alt: Teleport Automatic Agent Updates og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Teleport Automatic Agent Updates **[Teleport](https://daily.dev/sources/teleport)** · 5 min read · 0 upvotes · 0 comments ## Summary Teleport 13 introduces automatic agent updates for Teleport agents and Teleport Kubernetes Agents, eliminating manual per-agent upgrades. Admins set a maintenance window on the cluster, and a separate updater binary checks a version server (self-hosted or Teleport Cloud-hosted) to fetch the target version and apply updates, even if the agent has lost connection to the cluster. A critical flag allows urgent security patches to bypass the maintenance window. The feature currently supports systemd-based Linux distros (apt/yum) and Kubernetes clusters, and is available to Teleport Enterprise Cloud and self-hosted Enterprise users. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do automatic agent updates work in Teleport 13? A separate updater binary checks a version server for the target agent version and whether the update is marked critical, then applies the update if a maintenance window is active or the critical flag overrides it. The updater is decoupled from the agent so it can update even if the agent cannot join the cluster. Supported on systemd-based Linux (apt/yum) and Kubernetes agents. _Track infrastructure tooling updates like Teleport's release changes on daily.dev while planning cluster maintenance._ ### What is the difference between running Teleport's automatic agent updates on Teleport Cloud versus self-hosted? Teleport Cloud users can rely on Teleport Cloud's hosted version server when enrolling in automatic updates, requiring fewer setup steps, while self-hosted installations must host their own version server, a webserver with trusted TLS certificates reachable by all agents, such as an S3 bucket, Google Cloud Storage, or nginx over HTTPS. _Compare self-hosted versus managed infrastructure trade-offs like this one on daily.dev before choosing a deployment model._ ### How can a critical Teleport agent update bypass the scheduled maintenance window? A critical flag can be toggled on the version server to mark an update as critical, causing it to apply immediately rather than waiting for the regular maintenance window. This mechanism exists specifically to patch critical security issues or exploits without delay. _Follow how tools like Teleport handle urgent security patches on daily.dev to stay ahead of critical fixes._ ## Similar posts on daily.dev - [Teleport Launches Agentic Identity Framework to Secure AI Agents Across Enterprise Infrastructure](https://daily.dev/posts/teleport-launches-agentic-identity-framework-to-secure-ai-agents-across-enterprise-infrastructure-vosijavmu) · InfoQ · 0 upvotes · 0 comments - [Stop managing SSH keys on every server and switch to Teleport](https://daily.dev/posts/stop-managing-ssh-keys-on-every-server-and-switch-to-teleport-zoja48gov) · All Things Open · 0 upvotes · 0 comments - [Cloud Agents Just Got a Big Upgrade](https://daily.dev/posts/cloud-agents-just-got-a-big-upgrade-emdqcpfma) · Kilo Blog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#devops](https://daily.dev/tags/devops), [#kubernetes](https://daily.dev/tags/kubernetes), [#infrastructure](https://daily.dev/tags/infrastructure) [View this post on daily.dev](https://daily.dev/posts/teleport-automatic-agent-updates-d4mqtnxoc) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Teleport Automatic Agent Updates","url":"https://daily.dev/posts/teleport-automatic-agent-updates-d4mqtnxoc","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/teleport-automatic-agent-updates-d4mqtnxoc"},"datePublished":"2026-08-23T12:19:19.427Z","dateModified":"2026-08-23T12:31:59.313Z","description":"Teleport 13 introduces automatic agent updates for Teleport agents and Teleport Kubernetes Agents, eliminating manual per-agent upgrades. Admins set a...","image":"https://media.daily.dev/image/upload/s--0_ODbtD2--/f_auto/v1722860399/public/Placeholder%2008","thumbnailUrl":"https://media.daily.dev/image/upload/s--0_ODbtD2--/f_auto/v1722860399/public/Placeholder%2008","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/teleport-automatic-agent-updates-d4mqtnxoc","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,devops,kubernetes,infrastructure","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Teleport Automatic Agent Updates"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/teleport-automatic-agent-updates-d4mqtnxoc#faq","mainEntity":[{"@type":"Question","name":"How do automatic agent updates work in Teleport 13?","acceptedAnswer":{"@type":"Answer","text":"A separate updater binary checks a version server for the target agent version and whether the update is marked critical, then applies the update if a maintenance window is active or the critical flag overrides it. The updater is decoupled from the agent so it can update even if the agent cannot join the cluster. Supported on systemd-based Linux (apt/yum) and Kubernetes agents. Track infrastructure tooling updates like Teleport's release changes on daily.dev while planning cluster maintenance."}},{"@type":"Question","name":"What is the difference between running Teleport's automatic agent updates on Teleport Cloud versus self-hosted?","acceptedAnswer":{"@type":"Answer","text":"Teleport Cloud users can rely on Teleport Cloud's hosted version server when enrolling in automatic updates, requiring fewer setup steps, while self-hosted installations must host their own version server, a webserver with trusted TLS certificates reachable by all agents, such as an S3 bucket, Google Cloud Storage, or nginx over HTTPS. Compare self-hosted versus managed infrastructure trade-offs like this one on daily.dev before choosing a deployment model."}},{"@type":"Question","name":"How can a critical Teleport agent update bypass the scheduled maintenance window?","acceptedAnswer":{"@type":"Answer","text":"A critical flag can be toggled on the version server to mark an update as critical, causing it to apply immediately rather than waiting for the regular maintenance window. This mechanism exists specifically to patch critical security issues or exploits without delay. Follow how tools like Teleport handle urgent security patches on daily.dev to stay ahead of critical fixes."}}]} ```