mirror of https://github.com/linkerd/linkerd2.git
7cc5e5c646
This change modifies the linkerd-gateway component to use the inbound proxy, rather than nginx, for gateway. This allows us to detect loops and propagate identity through the gateway. This change also cleans up port naming to `mc-gateway` and `mc-probe` to resolve conflicts with Kubernetes validation. --- * proxy: v2.99.0 The proxy can now operate as gateway, routing requests from its inbound proxy to the outbound proxy, without passing the requests to a local application. This supports Linkerd's multicluster feature by adding a `Forwarded` header to propagate the original client identity and assist in loop detection. --- * Add loop detection to inbound & TCP forwarding (linkerd/linkerd2-proxy#527) * Test loop detection (linkerd/linkerd2-proxy#532) * fallback: Unwrap errors recursively (linkerd/linkerd2-proxy#534) * app: Split inbound/outbound constructors into components (linkerd/linkerd2-proxy#533) * Introduce a gateway between inbound and outbound (linkerd/linkerd2-proxy#540) * gateway: Add a Forwarded header (linkerd/linkerd2-proxy#544) * gateway: Return errors instead of responses (linkerd/linkerd2-proxy#547) * Fail requests that loop through the gateway (linkerd/linkerd2-proxy#545) * inject: Support config.linkerd.io/enable-gateway This change introduces a new annotation, config.linkerd.io/enable-gateway, that, when set, enables the proxy to act as a gateway, routing all traffic targetting the inbound listener through the outbound proxy. This also removes the nginx default listener and gateway port of 4180, instead using 4143 (the inbound port). * proxy: v2.100.0 This change modifies the inbound gateway caching so that requests may be routed to multiple leaves of a traffic split. --- * inbound: Do not cache gateway services (linkerd/linkerd2-proxy#549) |
||
|---|---|---|
| .. | ||
| deployment-inject-disabled.yaml | ||
| deployment-with-injected-proxy.yaml | ||
| inject-init-container-spec.yaml | ||
| inject-linkerd-secrets-volume-spec.yaml | ||
| inject-sidecar-container-spec.yaml | ||
| namespace-inject-disabled.yaml | ||
| namespace-inject-enabled.yaml | ||
| pod-inject-empty.yaml | ||
| pod-inject-enabled.yaml | ||
| pod-with-debug-disabled.yaml | ||
| pod-with-debug-enabled.yaml | ||
| pod-with-debug.patch.json | ||
| pod.patch.json | ||