diff --git a/stable/ambassador/Chart.yaml b/stable/ambassador/Chart.yaml
index 80fb242d96..2a437a04ef 100644
--- a/stable/ambassador/Chart.yaml
+++ b/stable/ambassador/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v1
 appVersion: 0.72.0
 description: A Helm chart for Datawire Ambassador
 name: ambassador
-version: 2.9.0
+version: 2.10.0
 icon: https://www.getambassador.io/images/logo.png
 home: https://www.getambassador.io/
 sources:
diff --git a/stable/ambassador/README.md b/stable/ambassador/README.md
index b57439832e..fd92c5c7be 100755
--- a/stable/ambassador/README.md
+++ b/stable/ambassador/README.md
@@ -103,6 +103,7 @@ The following tables lists the configurable parameters of the Ambassador chart a
 | `autoscaling.minReplica`           | If autoscaling enabled, this field sets minimum replica count                   | `2`                               |
 | `autoscaling.maxReplica`           | If autoscaling enabled, this field sets maximum replica count                   | `5`                               |
 | `autoscaling.metrics`              | If autoscaling enabled, configure hpa metrics                                   |                                   |
+| `additionalTCPPorts`               | List of additional TCP ports to be exposed by the container and service         | `[]`                              |
 
 **NOTE:** Make sure the configured `service.http.targetPort` and `service.https.targetPort` ports match your [Ambassador Module's](https://www.getambassador.io/reference/modules/#the-ambassador-module) `service_port` and `redirect_cleartext_from` configurations.
 
diff --git a/stable/ambassador/templates/deployment.yaml b/stable/ambassador/templates/deployment.yaml
index b1a845938f..dd364f401c 100644
--- a/stable/ambassador/templates/deployment.yaml
+++ b/stable/ambassador/templates/deployment.yaml
@@ -100,6 +100,11 @@ spec:
             {{- end }}
             - name: admin
               containerPort: 8877
+          {{- range $key := .Values.additionalTCPPorts }}
+            - name: "{{ $key }}-tcp"
+              containerPort: {{ $key }}
+              protocol: TCP
+          {{- end }}
           env:
             - name: HOST_IP
               valueFrom:
@@ -201,4 +206,3 @@ spec:
         {{- toYaml .Values.imagePullSecrets | nindent 8 }}
       dnsPolicy: {{ .Values.dnsPolicy }}
       hostNetwork: {{ .Values.hostNetwork }}
-
diff --git a/stable/ambassador/templates/service.yaml b/stable/ambassador/templates/service.yaml
index 59b07688c5..c5f0a6dbb8 100644
--- a/stable/ambassador/templates/service.yaml
+++ b/stable/ambassador/templates/service.yaml
@@ -38,6 +38,12 @@ spec:
       nodePort: {{ toYaml . }}
       {{- end }}
     {{- end }}
+    {{- range $key := .Values.additionalTCPPorts }}
+    - name: "{{ $key }}-tcp"
+      port: {{ $key }}
+      protocol: TCP
+      targetPort: "{{ $key }}-tcp"
+    {{- end }}
   selector:
     app.kubernetes.io/name: {{ include "ambassador.name" . }}
     app.kubernetes.io/instance: {{ .Release.Name }}
diff --git a/stable/ambassador/values.yaml b/stable/ambassador/values.yaml
index a4455cfbd3..a78415a9d8 100644
--- a/stable/ambassador/values.yaml
+++ b/stable/ambassador/values.yaml
@@ -109,6 +109,8 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name:
 
+additionalTCPPorts: []
+
 initContainers: []
 
 volumes: []