Changelog History
Page 10
-
v20.11.2 Changes
November 12, 2020edge-20.11.2
🚀 This edge release reduces memory consumption of Linkerd proxies which maintain
🚚 many idle connections (such as Prometheus). It also removes some obsolete
commands from the CLI and allows setting custom annotations on multicluster
gateways.- ⬇️ Reduced the default idle connection timeout to 5s for outbound clients and
🖨 20s for inbound clients to reduce the proxy's memory footprint, especially on
Prometheus instances - ➕ Added support for setting annotations on the multicluster gateway in Helm
which allows setting the load balancer as internal (thanks @shaikatz!) - ✂ Removed the
get
andlogs
command from the CLI
- ⬇️ Reduced the default idle connection timeout to 5s for outbound clients and
-
v20.11.1 Changes
November 03, 2020edge-20.11.1
🚀 This edge supersedes edge-20.10.6 as a release candidate for stable-2.9.0.
- 🛠 Fixed issue where the
check
command would error when there is no Prometheus
🔧 configured - 🛠 Fixed recent regression that caused multicluster on EKS to not work properly
- 🔄 Changed the
check
command to warn instead of error when webhook certificates
are near expiry - ➕ Added the
--ingress
flag to theinject
command which adds the recently
introducedlinkerd.io/inject: ingress
annotation - 🛠 Fixed issue with upgrades where external certs would be fetched and stored
even though this does not happen on fresh installs with externally created
certs - 🛠 Fixed issue with upgrades where the issuer cert expiration was being reset
- ✂ Removed the
--registry
flag from themulticluster install
command - ✂ Removed default CPU limits for the proxy and control plane components in HA
mode
- 🛠 Fixed issue where the
-
v20.10.6 Changes
October 27, 2020edge-20.10.6
🚀 This edge supersedes edge-20.10.5 as a release candidate for stable-2.9.0. It
➕ adds a newlinkerd.io/inject: ingress
annotation to support service profiles
and enable per-route metrics and traffic splits for HTTP ingress controllers- ➕ Added a new
linkerd.io/inject: ingress
annotation to configure the
👍 proxy to support service profiles and enable per-route metrics and traffic
splits for HTTP ingress controllers - 🐎 Reduced performance impact of logging in the proxy, especially when the
🌲debug
ortrace
log levels are disabled - 🛠 Fixed spurious warnings logged by the
linkerd profile
CLI command
- ➕ Added a new
-
v20.10.5 Changes
October 23, 2020edge-20.10.5
🚀 This edge supersedes edge-20.10.4 as a release candidate for stable-2.9.0. It
➕ adds a fix for updating the destination service when there are no endpoints- ➕ Added a fix to clear the EndpointTranslator state when it gets a
NoEndpoints
message. This ensures that the clients get the correct set of
⚡️ endpoints during an update.
- ➕ Added a fix to clear the EndpointTranslator state when it gets a
-
v20.10.4 Changes
October 23, 2020edge-20.10.4
🚀 This edge release is a release candidate for stable-2.9.0. For the proxy, there
🐎 have been changes to improve performance, remove unused code, and configure
🚀 ports that can be ignored by default. Also, this edge release adds enhancements
🌐 to the multicluster configuration and observability, adds more translations to
the dashboard, and addresses a bug in the CLI.- ➕ Added more Spanish translations to the dashboard and more labels that can be
translated - ➕ Added support for creating multiple service accounts when installing
multicluster with Helm to allow more granular revocation - 📇 Renamed
global.proxy.destinationGetNetworks
toglobal.clusterNetworks
.
This is a cluster-wide setting and can no longer be overridden per-pod - 🛠 Fixed an empty multicluster Grafana graph which used a deprecated label
- ➕ Added the control plane tracing ServiceAccounts to the linkerd-psp
RoleBinding so that it can be used in environments where PodSecurityPolicy
is enabled - ✨ Enhanced EKS support by adding
100.64.0.0/10
to the set of discoverable
networks - 🛠 Fixed a bug in the way that the
--all-namespaces
flag is handled by the
linkerd edges
command - ➕ Added a default set of ports to bypass the proxy for server-first, https,
and memcached traffic
- ➕ Added more Spanish translations to the dashboard and more labels that can be
-
v20.10.3 Changes
October 15, 2020edge-20.10.3
🚀 This edge release is a release candidate for stable-2.9.0. It overhauls the
discovery and routing logic implemented by the proxy, simplifies the way that
🔗 Linkerd stores configuration, and adds new Helm values to configure additional
labels, annotations, and namespace selectors for webhooks.- ➕ Added podLabels and podAnnotations Helm values to allow adding additional
labels or annotations to Linkerd control plane pods (thanks @tustvold!) - ➕ Added namespaceSelector Helm value for configuring the namespace selector
👉 used by admission webhooks (thanks @tustvold!) - Expanded the 'linkerd edges' command to show TCP connections
- Overhauled the discovery and routing logic implemented by the proxy:
- The
l5d-dst-override
header is no longer honored - When the application attempts to connect to a pod IP, the proxy no
longer load balances these requests among all pods in the service.
The proxy will now honor session-stickiness as selected by an
application-level load balancer TrafficSplits
are only applied when a client targets a service's IP- The proxy no longer performs DNS "canonicalization" to translate
relative host header names to a fully-qualified form
- The
- 🔧 Simplified the way that Linkerd stores its configuration. Configuration is
now stored as Helm values in the linkerd-config ConfigMap - 📇 Renamed the --addon-config flag to --config to clarify this flag can be used
to set any Helm value
- ➕ Added podLabels and podAnnotations Helm values to allow adding additional
-
v20.10.2 Changes
October 08, 2020edge-20.10.2
🚀 This edge release adds more improvements for mTLS for all TCP traffic.
It also includes significant internal improvements to the way Linkerd
🔧 configuration is stored within the cluster.- 🔄 Changed TCP metrics exported by the proxy to ensure that peer
identities are encoded via theclient_id
andserver_id
labels. - ✂ Removed the dependency of control plane components on
linkerd-config
- ⚡️ Updated the data structure
proxy-injector
uses to derive the configuration
👉 used when injecting workloads
- 🔄 Changed TCP metrics exported by the proxy to ensure that peer
-
v20.10.1 Changes
October 02, 2020edge-20.10.1
🚀 This edge release includes a couple of external contributions towards
👌 improved cert-manager support and Grafana charts fixes, among other
✨ enhancements.- 🔄 Changed the type of the injector and tap API secrets to
kubernetes.io/tls
,
so they can be provisioned by cert-manager (thanks @cypherfox!) - 🛠 Fixed the "Kubernetes cluster monitoring" Grafana dashboard that had a few
charts with incomplete data (thanks @aimbot31!) - 🛠 Fixed the
service-mirror
multicluster component so that it retries
connections to the target cluster's Kubernetes API when it's not reachable,
instead of blocking - 0️⃣ Increased the proxy's default timeout for DNS resolution to 500ms, as there
were reports that 100ms was too restrictive
- 🔄 Changed the type of the injector and tap API secrets to
-
v20.9.4 Changes
September 25, 2020edge-20.9.4
🚀 This edge release introduces support for authenticated docker registries and
🛠 fixes a recent multicluster regression.- 🛠 Fixed a regression in multicluster gateway configurations that would forbid
inbound gateway traffic - ⬆️ Upgraded bundled Grafana to v7.1.5
- 🔧 Enabled Jaeger receiver in collector configuration in Helm chart (thanks
@olivierboudet!) - 🛠 Fixed skip port configuration being skipped in CNI plugin
- 🐳 Introduced support for authenticated docker registries (thanks @c-n-c!)
- 🛠 Fixed a regression in multicluster gateway configurations that would forbid
-
v20.9.3 Changes
September 17, 2020edge-20.9.3
🚀 This edge release includes fixes and updates for the control plane and CLI.
- ➕ Added
--dest-cni-bin-dir
flag to thelinkerd install-cni
command, to
🔧 configure the directory on the host where the CNI binary will be placed - ✂ Removed
collector.name
andjaeger.name
config fields from the tracing
➕ addon - ⚡️ Updated Jaeger to 1.19.2
- 🛠 Fixed a warning about deprecated Go packages in controller container logs
- ➕ Added