Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
Go to file
Eliza Weisman 34df5aa606
inject: don't expand opaque port ranges (#10827)
Currently, the proxy injector will expand lists of opaque port ranges
into lists of individual port numbers. This is because the proxy has
historically not accepted port ranges in the
`LINKERD2_PROXY_INBOUND_PORTS_DISABLE_PROTOCOL_DETECTION` environment
variable. However, when very large ranges are used, the size of the
injected manifest can be quite large, since each individual port number
in a range must be listed separately.

Proxy PR linkerd/linkerd2-proxy#2395 changed the proxy to accept ranges
as well as individual port numbers in the opaque ports environment
variable, and this change was included in the latest proxy release
(v2.200.0). This means that the proxy-injector no longer needs to expand
large port ranges into individual port numbers, and can now simply
forward the list of ranges to the proxy. This branch changes the proxy
injector to do this, resolving issues with manifest size due to large
port ranges.

Closes #9803
2023-04-27 11:27:40 -07:00
.devcontainer Update to dev:v39 with Go 1.19 (#10336) 2023-02-16 08:25:42 -08:00
.github build(deps): bump tj-actions/changed-files from 35.8.0 to 35.9.0 (#10811) 2023-04-25 10:01:20 -07:00
audits add Trail of Bits audit; reorganize into audits/ (#8735) 2022-06-24 13:34:56 -07:00
bin Enable smoke tests (#10766) 2023-04-19 13:19:10 -07:00
charts Create policy-controller-write Lease at runtime (#10823) 2023-04-27 09:59:06 -07:00
cli Create policy-controller-write Lease at runtime (#10823) 2023-04-27 09:59:06 -07:00
cni-plugin Bump cni-plugin to v1.1.1 (#10780) 2023-04-20 12:21:09 -05:00
controller inject: don't expand opaque port ranges (#10827) 2023-04-27 11:27:40 -07:00
grafana Fix Grafana dashboard regex for filesystem usage on Linode (#10445) 2023-03-06 08:49:31 -07:00
jaeger edge-23.4.2 (#10794) 2023-04-21 13:40:36 -05:00
multicluster edge-23.4.2 (#10794) 2023-04-21 13:40:36 -05:00
pkg inject: don't expand opaque port ranges (#10827) 2023-04-27 11:27:40 -07:00
policy-controller Create policy-controller-write Lease at runtime (#10823) 2023-04-27 09:59:06 -07:00
policy-test policy: add end-to-end test for failure accrual (#10681) 2023-04-13 13:18:00 -07:00
proto Remove legacy upgrade and it's references (#7309) 2021-11-29 20:08:58 +05:30
proxy-identity Replace usage of io/ioutil package (#9613) 2022-10-13 12:10:58 -05:00
test edge-23.4.2 (#10794) 2023-04-21 13:40:36 -05:00
testutil Add new integration test for "linkerd multicluster allow" command (#6693) (#10632) 2023-04-20 09:34:52 -05:00
viz edge-23.4.2 (#10794) 2023-04-21 13:40:36 -05:00
web build(deps-dev): bump eslint-webpack-plugin in /web/app (#10808) 2023-04-24 11:23:47 -07:00
.dockerignore dev: Add a reusable action-dev-check script (#9185) 2022-08-16 18:14:37 -07:00
.editorconfig Add PodDisruptionBudgets to control plane (#5398) (#5406) 2021-01-06 09:19:15 -05:00
.gitattributes Update gitattributes to improve PR file visilibity (#6767) 2021-08-30 14:52:53 -07:00
.gitignore Upload code coverage of unit tests to codecov (#6321) 2021-06-23 10:15:01 -06:00
.golangci.yml Removed dupe imports (#10049) 2023-01-10 14:34:56 -05:00
.helmdocsignore Add automatic readme generation for charts (#5316) 2020-12-02 14:37:45 -05:00
.markdownlint.yaml Lint all markdown files in CI (#4402) 2020-05-19 23:03:50 -07:00
.proxy-version proxy: v2.200.0 (#10822) 2023-04-26 09:56:26 -07:00
ADOPTERS.md Add Samarkand Global to adopters (#10490) 2023-03-10 09:11:30 -06:00
BUILD.md doc: update BUILD (#10579) 2023-03-20 17:42:35 -07:00
CHANGES.md fix broken link to circuit-breaking docs in CHANGES.md (#10792) 2023-04-24 10:24:34 -07:00
CODE_OF_CONDUCT.md Lint all markdown files (#4403) 2020-05-19 09:59:26 -07:00
CONTRIBUTING.md Spelling (#6215) 2021-06-07 15:16:59 -06:00
Cargo.lock update `h2` dependency to v0.3.18 (#10802) 2023-04-24 09:14:58 -05:00
Cargo.toml update `linkerd2-proxy-api` to v0.9.0 (#10724) 2023-04-10 13:27:36 -07:00
DCO Add contributing doc and DCO file (#88) 2017-12-22 14:54:27 -08:00
Dockerfile-debug Update debian to bullseye (#8287) 2022-04-19 14:25:30 -07:00
Dockerfile-proxy Bump linkerd2-proxy-init packages (#10678) 2023-04-04 18:07:03 -05:00
EXTENSIONS.md cli: Support running `check` on CLI-only extensions (#10588) 2023-03-29 12:07:36 -07:00
GOVERNANCE.md add preamble to GOVERNANCE.md (#6008) 2021-04-12 17:49:20 -05:00
LICENSE Introducing Conduit, the ultralight service mesh 2017-12-05 00:24:55 +00:00
MAINTAINERS.md Update MAINTAINERS.md (#10534) 2023-03-15 14:08:27 -05:00
README.md Update readme: security audits, and year (#10165) 2023-01-20 09:53:37 +00:00
RELEASE.md linkerd-cni: add new release to the build (#10209) 2023-02-08 13:54:35 -08:00
ROADMAP.md Update roadmap (#7413) 2021-12-13 16:11:32 -05:00
SECURITY.md add Trail of Bits audit; reorganize into audits/ (#8735) 2022-06-24 13:34:56 -07:00
STEERING.md add STEERING.md (#5607) 2021-01-27 09:39:32 -06:00
TEST.md dev: Update markdowlint-cli2 to v0.5.1 (#9166) 2022-08-15 12:59:59 -07:00
deny.toml update `kubert` to v0.16 (#10725) 2023-04-10 12:50:49 -07:00
go.mod build(deps): bump k8s.io/apiextensions-apiserver from 0.26.3 to 0.27.1 (#10786) 2023-04-25 10:12:38 -07:00
go.sum build(deps): bump k8s.io/apiextensions-apiserver from 0.26.3 to 0.27.1 (#10786) 2023-04-25 10:12:38 -07:00
justfile Remove viz dependency in multicluster tests (#10609) 2023-03-30 15:11:32 +01:00
rust-toolchain Update to dev:v32 with Rust 1.64.0 (#9675) 2022-10-21 10:28:00 -07:00
tools.go Update to dev:v39 with Go 1.19 (#10336) 2023-02-16 08:25:42 -08:00

README.md

Linkerd

Linkerd

CII Best Practices GitHub Actions Status GitHub license Go Report Card Go Reference Slack Status

🎈 Welcome to Linkerd! 👋

Linkerd is an ultralight, security-first service mesh for Kubernetes. Linkerd adds critical security, observability, and reliability features to your Kubernetes stack with no code change required.

Linkerd is a Cloud Native Computing Foundation (CNCF) project.

Repo layout

This is the primary repo for the Linkerd 2.x line of development.

The complete list of Linkerd repos is:

Quickstart and documentation

You can run Linkerd on any modern Kubernetes cluster in a matter of seconds. See the Linkerd Getting Started Guide for how.

For more comprehensive documentation, start with the Linkerd docs. (The doc source code is available in the website repo.)

Working in this repo

BUILD.md includes general information on how to work in this repo.

We ❤️ pull requests! See CONTRIBUTING.md for info on contributing changes.

Get involved

Community meetings

We host regular online meetings for contributors, adopters, maintainers, and anyone else interested to connect in a synchronous fashion. These meetings usually take place the last Thursday of the month at 9am Pacific / 4pm UTC.

We're a friendly group, so please feel free to join us!

Steering Committee meetings

We host regular online meetings for the Linkerd Steering Committee. All are welcome to attend, but audio and video participation is limited to Steering Committee members and maintainers. These meetings are currently scheduled on an ad-hoc basis and announced on the linkerd-users mailing list.

Code of Conduct

This project is for everyone. We ask that our users and contributors take a few minutes to review our Code of Conduct.

Security

See SECURITY.md for our security policy, including how to report vulnerabilities.

Linkerd undergoes periodic third-party security audits and we publish the results here.

License

Copyright 2023 the Linkerd Authors. All rights reserved.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use these files except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.