diff --git a/addons/traefik-forward-auth/traefik-forward-auth.yaml b/addons/traefik-forward-auth/traefik-forward-auth.yaml
index cb757ea3..7f97e35f 100644
--- a/addons/traefik-forward-auth/traefik-forward-auth.yaml
+++ b/addons/traefik-forward-auth/traefik-forward-auth.yaml
@@ -4,7 +4,9 @@ metadata:
   name: traefik-forward-auth
   namespace: kubeaddons
   annotations:
-    catalog.kubeaddons.mesosphere.io/addon-revision: "1.0.5-1"
+    catalog.kubeaddons.mesosphere.io/addon-revision: "2.0.0-1"
+    helm.kubeaddons.mesosphere.io/upgrade-strategy: '[{"upgradeFrom": "<=1.0.5", "strategy": "delete"}]'
+    helm2.kubeaddons.mesosphere.io/upgrade-strategy: '[{"upgradeFrom": "<=1.0.5", "strategy": "delete"}]'
 spec:
   kubernetes:
     minSupportedVersion: v1.15.6
@@ -29,13 +31,13 @@ spec:
   chartReference:
     chart: traefik-forward-auth
     repo: https://mesosphere.github.io/charts/staging
-    version: 0.2.14
+    version: 0.3.0
     values: |
       ---
       replicaCount: 1
       image:
         repository: mesosphere/traefik-forward-auth
-        tag: 2.0.5
+        tag: 3.0.0
         pullPolicy: IfNotPresent
       resources:
         requests:
@@ -82,7 +84,7 @@ spec:
       initContainers:
       # initialize-traefik-forward-auth deploys credentials for use by the proxy
       - name: initialize-traefik-forward-auth
-        image: mesosphere/kubeaddons-addon-initializer:v0.2.9
+        image: mesosphere/kubeaddons-addon-initializer:v0.5.1
         args: ["traefikforwardauth"]
         env:
         - name: "TFA_CONFIGMAP_NAME"
@@ -93,3 +95,7 @@ spec:
           value: "kubeaddons"
         - name: "TFA_INGRESS_SERVICE_NAME"
           value: "traefik-kubeaddons"
+      clusterStorage:
+        enabled: true
+        namespace: kubeaddons
+      addonsInitializer: mesosphere/kubeaddons-addon-initializer:v0.5.1