mirror of https://github.com/linkerd/linkerd2.git
53baecb382
## edge-20.1.3
* CLI
* Introduced `linkerd check --pre --linkerd-cni-enabled`, used when the CNI
plugin is used, to check it has been properly installed before proceeding
with the control plane installation
* Added support for the `--as-group` flag so that users can impersonate
groups for Kubernetes operations (thanks @mayankshah160!)
* Controller
* Fixed an issue where an override of the Docker registry was not being
applied to debug containers (thanks @javaducky!)
* Added check for the Subject Alternate Name attributes to the API server
when access restrictions have been enabled (thanks @javaducky!)
* Added support for arbitrary pod labels so that users can leverage the
Linkerd provided Prometheus instance to scrape for their own labels
(thanks @daxmc99!)
* Fixed an issue with CNI config parsing
Signed-off-by: Kevin Leimkuhler <kevin@kleimkuhler.com>
|
||
|---|---|---|
| .. | ||
| templates | ||
| .helmignore | ||
| Chart.yaml | ||
| OWNERS | ||
| README.md | ||
| requirements.lock | ||
| requirements.yaml | ||
| values.yaml | ||
README.md
Linkerd2-cni Helm Chart
Linkerd is a service mesh, designed to give platform-wide observability, reliability, and security without requiring configuration or code changes. The Linkerd CNI plugin takes care of setting up your pod's network so incoming and outgoing traffic is proxied through the data plane.
Configuration
The following table lists the configurable parameters of the Linkerd2-cni chart and their default values.
| Parameter | Description | Default |
|---|---|---|
cniPluginImage |
Docker image for the CNI plugin | gcr.io/linkerd-io/cni-plugin |
cniPluginVersion |
Tag for the CNI container Docker image | latest version |
cniResourceAnnotation |
CNI resource annotation. Do not edit | linkerd.io/cni-resource |
controllerNamespaceLabel |
Control plane label. Do not edit | linkerd.io/control-plane-ns |
createdByAnnotation |
Annotation label for the proxy create. Do not edit. | linkerd.io/created-by |
destCNIBinDir |
Directory on the host where the CNI plugin binaries reside | /opt/cni/bin |
destCNINetDir |
Directory on the host where the CNI configuration will be placed | /etc/cni/net.d |
ignoreInboundPorts |
Inbound ports the proxy should ignore | |
ignoreOutboundPorts |
Outbound ports the proxy should ignore | |
inboundProxyPort |
Inbound port for the proxy container | 4143 |
logLevel |
Log level for the CNI plugin | info |
namespace |
CNI plugin plane namespace | linkerd-cni |
outboundProxyPort |
Outbound port for the proxy container | 4140 |
portsToRedirect |
Ports to redirect to proxy | |
proxyUID |
User id under which the proxy shall be ran | 2102 |
useWaitFlag |
Configures the CNI plugin to use the -w flag for the iptables command | false |