From c0a64946fb6790f0afae3ac25aff77c84c320df5 Mon Sep 17 00:00:00 2001 From: cpretzer Date: Thu, 19 Nov 2020 12:08:25 -0800 Subject: [PATCH] edge-20.11.3 changes (#5255) * edge-20.11.3 changes Signed-off-by: Charles Pretzer * linting Signed-off-by: Charles Pretzer --- CHANGES.md | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/CHANGES.md b/CHANGES.md index b7875ff41..a79b91b8d 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,5 +1,33 @@ + # Changes +## edge-20.11.3 + +This edge release improves support for CNI by properly handling parameters +passed to the `nsenter` command, relaxes checks on root and intermediate +certificates (following X509 best practices), and fixes two issues: one that +prevented installation of the control plane into a custom namespace and one +which failed to update endpoint information when a headless service is modified. +This release also improves linkerd proxy performance by eliminating unnecessary +endpoint resolutions for TCP traffic and properly tearing down serverside +connections when an errors occur. + +* Added HTTP/2 keepalive PING frames +* Removed logic to avoid redundant TCP endpoint resolution +* Fixed an issue where serverside connections where not torn down when an error + occurs +* Updated `linkerd check` so that it doesn't attempt to validate the subject + alternative name (SAN) on root and intermediate certificates. SANs for leaf + certificates will continue to be validated +* Fixed a CLI issue where the `linkerd-namespace` flag is not honored when + passed to the `install` and `upgrade` commands +* Fixed an issue where the proxy does not receive updated endpoint information + when a headless service is modified +* Updated the control plane Docker images to use `buster-20201117-slim` to + reduce potential security vulnerabilities +* Updated the proxy-init container to `v1.3.7` which fixes CNI issues in certain + environments by properly parsing `nsenter` args + ## edge-20.11.2 This edge release reduces memory consumption of Linkerd proxies which maintain