diff --git a/upgrade/v2.2.0/01-upgrade-config.sh b/upgrade/v2.2.0/01-upgrade-config.sh
new file mode 100755
index 000000000..04adf9577
--- /dev/null
+++ b/upgrade/v2.2.0/01-upgrade-config.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+# tune shell check rules: SC2164 https://github.com/koalaman/shellcheck/wiki/SC2164
+# shellcheck disable=SC2038
+# Warning:(12, 5) Shellcheck find: Use -print0/-0 or -exec + to allow for non-alphanumeric filenames. [SC2038]
+
+
+#set -o xtrace # debug mode
+set -o errexit # exit on errors
+
+CONFIG_REPO="$1"
+echo "Migrating config repo clone at ${CONFIG_REPO}"
+
+function need_upgrade() {
+    echo "checking whether upgrade is needed"
+    find "${CONFIG_REPO}" -name "ci-deployment-overview.yml" | xargs grep -n mattermost
+    return $?
+}
+if ! need_upgrade ; then
+    echo "No need to apply upgrade."
+    exit 0
+fi
+
+echo "removing deprecated mattermost certs from ci-deployment overview:"
+find "${CONFIG_REPO}" -name "ci-deployment-overview.yml" | xargs -n 1 sed -i -e '/^.*credentials-mattermost-certs.yml/d'
+
+echo "expecting no more mattermost in following list:"
+set +o errexit # don't exit on grep finding no file
+find "${CONFIG_REPO}" -name "ci-deployment-overview.yml" | xargs grep -n mattermost
+
+echo "please review the changes applied and commit/push"