conduit v22.8.1 Release Notes

  • ๐Ÿš€ This releases introduces default probe authorization. This means that on 0๏ธโƒฃ clusters that use a default deny policy, probes do not have to be explicitly authorized using policy resources. Additionally, the policyController.probeNetworks Helm value has been added, which allows users ๐Ÿ”ง to configure the networks that probes are expected to be performed from.

    โž• Additionally, the linkerd authz command has been updated to support the policy resources AuthorizationPolicy and HttpRoute.

    Finally, some smaller changes include allowing to disable linkerd-await on ๐Ÿ”ง control plane components (using the existing proxy.await configuration) and 0๏ธโƒฃ changing the default iptables mode back to legacy to support more cluster 0๏ธโƒฃ environments by default.

    • โšก๏ธ Updated the linkerd authz command to support AuthorizationPolicy and HttpRoute resources
    • ๐Ÿ”„ Changed the proxy.await Helm value so that users can now disable linkerd-await on control plane components
    • โž• Added probe authorization by default allowing clusters that use a default deny policy to not explicitly need to authorize probes
    • โž• Added ability to run the Linkerd CNI plugin in non-chained (stand-alone) mode
    • โž• Added the policyController.probeNetworks Helm value for configuring the networks that probes are expected to be performed from
    • ๐Ÿ”„ Changed the default iptables mode to legacy