Add changes for `edge-19.8.4` (#3272)

Depends on #3276

Signed-off-by: Andrew Seigner <siggy@buoyant.io>

CHANGES.md

@@ -1,3 +1,14 @@
+## edge-19.8.4
+
+This edge release is a release candidate for `stable-2.5`.
+
+* CLI
+  * Introduced `--use-wait-flag` to the `linkerd install-cni` command, to
+    configure the CNI plugin to use the `-w` flag for `iptables` commands
+* Controller
+  * Disabled the tap gRPC server listener. All tap requests now require RBAC
+    authentication and authorization
+
 ## edge-19.8.3
 
 This edge release introduces a new `linkerd stat trafficsplits` subcommand, to
@@ -10,6 +21,7 @@ Grafana dashboard.
     annotations
   * Fixed `linkerd stat -h` example commands (thanks @ethan-daocloud!)
 * Controller
+  * Added support for namespace-level proxy override annotations
   * Removed unauthenticated tap from the Public API
 * Proxy
   * Added `request_handle_us` histogram to measure proxy overhead

charts/linkerd2/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: "v1"
-appVersion: edge-19.8.3
+appVersion: edge-19.8.4
 description: Linkerd gives you observability, reliability, and security for your microservices — with no code change required.
 home: https://linkerd.io
 keywords:

charts/linkerd2/values.yaml

@@ -7,7 +7,7 @@ EnableH2Upgrade: true
 ImagePullPolicy: &image_pull_policy IfNotPresent
 
 # control plane version. See Proxy section for proxy version
-LinkerdVersion: &linkerd_version edge-19.8.3
+LinkerdVersion: &linkerd_version edge-19.8.4
 
 Namespace: linkerd
 OmitWebhookSideEffects: false