mirror of https://github.com/linkerd/linkerd2.git
93dbb8b3e7
This release includes several control plane and proxy fixes for
`stable-2.12.0`. In particular, it fixes issues related to control plane
HTTP servers' header read timeouts resulting in decreased controller
success rates, lowers the inbound connection pool idle timeout in the
proxy, and fixes an issue where the jaeger injector would put pods into
an error state when upgrading from stable-2.11.x.
Additionally, this release adds the `linkerd.io/trust-root-sha256`
annotation to all injected workloads allowing predictable comparison of
all workloads' trust anchors via the Kubernetes API.
For Windows users, note that the Linkerd CLI's `nupkg` file for
Chocolatey is once again included in the release assets (it was
previously removed in stable-2.10.0).
* Proxy
* Lowered inbound connection pool idle timeout to 3s
* Control Plane
* Updated AdmissionRegistration API version usage to v1
* Added `linkerd.io/trust-root-sha256` annotation on all injected
workloads to indicate certifcate bundle
* Updated fields in `AuthorizationPolicy` and `MeshTLSAuthentication`
to conform to specification (thanks @aatarasoff!)
* Updated the identity controller to not require a
`ClusterRoleBinding` to read all deployment resources
* Increased servers' header read timeouts so they no longer match
default probe and Prometheus scrape intervals
* Helm
* Restored `namespace` field in Linkerd helm charts
* Updated `PodDisruptionBudget` `apiVersion` from `policy/v1beta1` to
`policy/v1` (thanks @Vrx555!)
* Extensions
* Fixed jaeger injector interfering with upgrades to 2.12.x
|
||
|---|---|---|
| .. | ||
| charts/linkerd-jaeger | ||
| cmd | ||
| injector | ||
| pkg/labels | ||
| static | ||