Alejandro Pedraza fe79b598ed chore(helm)!: change iptables default mode to `nft` (#14326) ... * chore(helm)!: change iptables default mode to `nft` This change sets as a new default `nft` for the `proxyInit.iptablesMode` and `iptablesMode` values in the linkerd-control-plane and linkerd2-cni helm charts. This doesn't imply any change in user-facing behavior. This was prompted by EKS with k8s 1.33 no longer supporting the iptables legacy mode. Further testing in multiple platforms with different k8s versions revealed nft mode is now broadly supported. Upgrading via Helm will apply the new default, unless the initial install explicitly set the legacy mode.		2025-08-06 17:01:09 -05:00
..
annotation.patch.json	Add opaque ports namespace inheritance to pods (#5941)	2021-03-29 19:41:15 -04:00
deployment-inject-disabled.yaml	Add pod spec annotation to disable injection in CLI and auto-injector (#2187)	2019-02-01 16:57:06 -08:00
deployment-with-injected-proxy.yaml	docker: Access container images via cr.l5d.io (#5756)	2021-02-17 14:31:54 -08:00
filter-pod-opaque-ports.yaml	Filter default opaque ports for pods and services (#6774)	2021-08-31 16:11:42 -06:00
filter-service-opaque-ports.yaml	Filter default opaque ports for pods and services (#6774)	2021-08-31 16:11:42 -06:00
filtered-pod-opaque-ports.json	Filter default opaque ports for pods and services (#6774)	2021-08-31 16:11:42 -06:00
filtered-service-opaque-ports.json	Filter default opaque ports for pods and services (#6774)	2021-08-31 16:11:42 -06:00
inject-init-container-spec.yaml	make group ID configurable (#11924)	2024-05-23 15:54:21 -05:00
inject-linkerd-secrets-volume-spec.yaml	Have the Webhook react to pod creation/update only (#2472)	2019-03-26 11:53:56 -05:00
namespace-inject-disabled.yaml	Update auto-injector to require opt-in by namespace or pod (#2209)	2019-02-06 17:37:14 -08:00
namespace-inject-enabled.yaml	Update auto-injector to require opt-in by namespace or pod (#2209)	2019-02-06 17:37:14 -08:00
namespace-with-opaque-ports.yaml	Add services to proxy injector for opaque ports annotation (#5766)	2021-02-17 20:58:18 -05:00
pod-cpu-ratio.json	chore(helm)!: change iptables default mode to `nft` (#14326)	2025-08-06 17:01:09 -05:00
pod-inject-empty.yaml	Include pod probe ports in inbound proxy config (#8645)	2022-06-13 18:33:56 +01:00
pod-inject-enabled-cpu-ratio.yaml	feat(inject): replace proxy.cores with proxy.runtime.workers (#13767)	2025-03-17 18:54:20 +00:00
pod-inject-enabled-log-level.yaml	fix(proxy-injector): handle proxy-log-level with quotes (#13480)	2024-12-13 12:12:09 -08:00
pod-inject-enabled.yaml	Include pod probe ports in inbound proxy config (#8645)	2022-06-13 18:33:56 +01:00
pod-log-level.json	chore(helm)!: change iptables default mode to `nft` (#14326)	2025-08-06 17:01:09 -05:00
pod-with-custom-debug-tag.yaml	fix(injector): use annotated values for debug container (#13778)	2025-03-18 14:25:16 -05:00
pod-with-custom-debug.patch.json	chore(helm)!: change iptables default mode to `nft` (#14326)	2025-08-06 17:01:09 -05:00
pod-with-debug-disabled.yaml	Include pod probe ports in inbound proxy config (#8645)	2022-06-13 18:33:56 +01:00
pod-with-debug-enabled.yaml	Set `LINKERD2_PROXY_INBOUND_PORTS` during injection (#6445)	2021-07-09 11:52:20 -05:00
pod-with-debug.patch.json	chore(helm)!: change iptables default mode to `nft` (#14326)	2025-08-06 17:01:09 -05:00
pod-with-ns-annotations.patch.json	chore(helm)!: change iptables default mode to `nft` (#14326)	2025-08-06 17:01:09 -05:00
pod-with-opaque-ports.yaml	Add opaque ports namespace inheritance to pods (#5941)	2021-03-29 19:41:15 -04:00
pod-without-opaque-ports.yaml	Add opaque ports namespace inheritance to pods (#5941)	2021-03-29 19:41:15 -04:00
pod.patch.json	chore(helm)!: change iptables default mode to `nft` (#14326)	2025-08-06 17:01:09 -05:00
service-with-opaque-ports.yaml	Add services to proxy injector for opaque ports annotation (#5766)	2021-02-17 20:58:18 -05:00
service-without-opaque-ports.yaml	Add services to proxy injector for opaque ports annotation (#5766)	2021-02-17 20:58:18 -05:00