conduit v20.12.4 Release Notes

  • ๐Ÿš€ This edge release adds support for the config.linkerd.io/opaque-ports ๐Ÿ”ง annotation on pods and namespaces, to configure ports that should skip the proxy's protocol detection. In addition, it adds new CLI commands related to the โฌ†๏ธ linkerd-jaeger extension, fixes bugs in the CLI install and upgrade ๐Ÿ›  commands and Helm charts, and fixes a potential false positive in the proxy's ๐ŸŽ HTTP protocol detection. Finally, it includes improvements in proxy performance โฌ†๏ธ and memory usage, including an upgrade for the proxy's dependency on the Tokio async runtime.

    • โž• Added support for the config.linkerd.io/opaque-ports annotation on pods and namespaces, to indicate to the proxy that some ports should skip protocol detection
    • ๐Ÿ›  Fixed an issue where linkerd install --ha failed to honor flags
    • ๐Ÿ›  Fixed an issue where linkerd upgrade --ha can override existing configs
    • โž• Added missing label to the linkerd-config-overrides secret to avoid breaking upgrades performed with the help of kubectl apply --prune
    • โž• Added a missing icon to Jaeger Helm chart
    • โž• Added new linkerd jaeger check CLI command to validate that the linkerd-jaeger extension is working correctly
    • โž• Added new linkerd jaeger uninstall CLI command to print the linkerd-jaeger extension's resources so that they can be piped into kubectl delete
    • ๐Ÿ›  Fixed an issue where the linkerd-cni daemgitonset may not be installed on all intended nodes, due to missing tolerations to the linkerd-cni Helm chart (thanks @rish-onesignal!)
    • ๐Ÿ›  Fixed an issue where the tap APIServer would not refresh its certs automatically when provided externallyโ€”like through cert-manager
    • ๐Ÿ”„ Changed the proxy's cache eviction strategy to reduce memory consumption, especially for busy HTTP/1.1 clients
    • ๐Ÿ›  Fixed an issue in the proxy's HTTP protocol detection which could cause false positives for non-HTTP traffic
    • 0๏ธโƒฃ Increased the proxy's default dispatch timeout to 5 seconds to accommodate connection pools which might open connections without immediately making a request
    • โšก๏ธ Updated the proxy's Tokio dependency to v0.3