conduit v22.10.3 Release Notes

  • ๐Ÿš€ This edge release adds network-validator, a new init container to be used when CNI is enabled. network-validator ensures that local iptables rules are working as expected. It will validate this before linkerd-proxy starts. network-validator replaces the noop container, runs as nobody, and drops all capabilities before starting.

    • ๐Ÿ”ง Validate CNI iptables configuration during pod startup
    • ๐Ÿ›  Fix "cluster networks contains all services" fails with services with no ClusterIP
    • โœ‚ Remove kubectl version check from linkerd check (thanks @ziollek!)
    • Set readOnlyRootFilesystem: true in viz chart (thanks @mikutas!)
    • ๐Ÿ›  Fix linkerd multicluster install by re-adding pause container image in chart
    • ๐Ÿ”— linkerd-viz have hardcoded image value in namespace-metadata.yml template bug correction (thanks @bastienbosser!)