conduit v22.8.1 Release Notes
-
๐ This releases introduces default probe authorization. This means that on 0๏ธโฃ clusters that use a default
deny
policy, probes do not have to be explicitly authorized using policy resources. Additionally, thepolicyController.probeNetworks
Helm value has been added, which allows users ๐ง to configure the networks that probes are expected to be performed from.โ Additionally, the
linkerd authz
command has been updated to support the policy resources AuthorizationPolicy and HttpRoute.Finally, some smaller changes include allowing to disable
linkerd-await
on ๐ง control plane components (using the existingproxy.await
configuration) and 0๏ธโฃ changing the default iptables mode back tolegacy
to support more cluster 0๏ธโฃ environments by default.- โก๏ธ Updated the
linkerd authz
command to support AuthorizationPolicy and HttpRoute resources - ๐ Changed the
proxy.await
Helm value so that users can now disablelinkerd-await
on control plane components - โ Added probe authorization by default allowing clusters that use a default
deny
policy to not explicitly need to authorize probes - โ Added ability to run the Linkerd CNI plugin in non-chained (stand-alone) mode
- โ Added the
policyController.probeNetworks
Helm value for configuring the networks that probes are expected to be performed from - ๐ Changed the default iptables mode to
legacy
- โก๏ธ Updated the