edge-24.3.4

Overall Status: RECOMMENDED

Cautions

None.

Changes

This edge release fixes the first of two issues where policy.linkerd.io HTTPRoutes could be endlessly patched even when they weren't changing (issue 12104), and another where the destination controller could generate large numbers of unnecessary endpoint updates when a Server changed. It also adds default values to generated docs for the proxy-*-connect-timeout annotations (thanks Akshay Dongaonkar!), fixes excessive logging in the injector webhook (issue 12186, thanks Adarsh Jaiswal!), and cleans up an unneeded error message from the destination controller (thanks [Hirotaka Tagawa]!).

Finally, this edge release fixes an issue that could mistakenly turn off local traffic policy when an endpoint is removed (issue 12311), adds a timeout to HTTPRoute status patches, continues work on upcoming IPv6 support, and stops unnecessarily checking about injecting the kube-system namespace when running in HA mode.

What's Changed

• Add default values to proxy-*-connect-timeout annotations docs by @doubletooth in #12155
• build(deps): bump tokio-stream from 0.1.14 to 0.1.15 by @dependabot in #12264
• build(deps): bump tokio-test from 0.4.3 to 0.4.4 by @dependabot in #12265
• build(deps): bump docker/setup-buildx-action from 3.1.0 to 3.2.0 by @dependabot in #12266
• ci: Use ubuntu-22.04 runners by @olix0r in #12270
• Remove kube-system injection check by @adleong in #12263
• Update version parsing to work with build info by @klingerf in #12255
• build(deps): bump k8s.io/endpointslice from 0.29.2 to 0.29.3 by @dependabot in #12287
• build(deps): bump clap from 4.5.2 to 4.5.3 by @dependabot in #12282
• build(deps): bump unsafe-libyaml from 0.2.10 to 0.2.11 by @dependabot in #12281
• build(deps): bump async-trait from 0.1.77 to 0.1.78 by @dependabot in #12280
• build(deps): bump h2 from 0.3.24 to 0.3.25 by @dependabot in #12279
• build(deps): bump serde_yaml from 0.9.32 to 0.9.33 by @dependabot in #12278
• build(deps): bump date-fns from 3.3.1 to 3.5.0 in /web/app by @dependabot in #12277
• build(deps-dev): bump eslint-webpack-plugin from 4.0.1 to 4.1.0 in /web/app by @dependabot in #12276
• build(deps-dev): bump webpack-dev-server from 4.15.1 to 5.0.3 in /web/app by @dependabot in #12274
• build(deps): bump k8s.io/apiextensions-apiserver from 0.29.2 to 0.29.3 by @dependabot in #12286
• build(deps-dev): bump eslint-plugin-react from 7.34.0 to 7.34.1 in /web/app by @dependabot in #12275
• ci: Retry policy test failures by @olix0r in #12272
• build(deps): bump k8s.io/kube-aggregator from 0.29.2 to 0.29.3 by @dependabot in #12283
• ci: Update Go workflow to always run by @olix0r in #12273
• update governance to introduce a director role by @wmorgan in #12262
• ci: Ensure repo is checked out before comparing files by @olix0r in #12292
• Don't patch httproute status if it hasn't changed by @adleong in #12215
• Add IPv6 support for the policy controller, expand clusterNetworks by @alpeb in #12291
• Don't send endpoint profile updates from Server updates when opaqueness doesn't change by @adleong in #12013
• build(deps): bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by @dependabot in #12301
• build(deps): bump rustix from 0.38.31 to 0.38.32 by @dependabot in #12300
• build(deps): bump aho-corasick from 1.1.2 to 1.1.3 by @dependabot in #12299
• ci: Automatically sync new proxy releases by @olix0r in #12304
• ci: Only rerun integrations on test failure by @olix0r in #12305
• proxy: v2.223.0 by @l5d-bot in #12306
• ci: Fix integration-ok when build fails by @olix0r in #12307
• build(deps): bump smallvec from 1.13.1 to 1.13.2 by @dependabot in #12308
• build(deps): bump tj-actions/changed-files from 43.0.0 to 43.0.1 by @dependabot in #12309
• ci: Print verbose outputs in testing by @olix0r in #12314
• Add timeout and metrics to HttpRoute status patching by @adleong in #12250
• ci: Relax version validation in git-commit-proxy-version by @olix0r in #12315
• ci: Update sync-proxy workflow to honor tag prefix by @olix0r in #12316
• ci: Use the PAT when syncing proxy versions by @olix0r in #12317
• ci: Fix PAT configuration in sync-proxy by @olix0r in #12318
• ci: Use rust-cache in policy test workflow by @olix0r in #12297
• ci: Replace git-commit-proxy-version with sync-proxy by @olix0r in #12321
• build(deps): bump webpack-dev-middleware from 7.0.0 to 7.1.1 in /web/app by @dependabot in #12320
• ci: Update fetch-proxy to lookup versions by name by @olix0r in #12322
• ci: Use nextest for policy tests by @olix0r in #12323
• ci: Enable verbose test output in multicluster tests by @olix0r in #12324
• Refactor IPv4-only functions to also work for IPv6 by @alpeb in #12303
• build(deps): bump github.com/prometheus/common from 0.50.0 to 0.51.0 by @dependabot in #12327
• build(deps): bump backtrace from 0.3.69 to 0.3.70 by @dependabot in #12326
• Removes should not change local traffic policy by @adleong in #12325
• [fixed] : Excessive logging when encountering "unimplemented resource type" errors in injector webhook by @Adarsh-jaiss in #12254
• fix: change log level when err is http.ErrServerClosed by @wafuwafu13 in #12167

New Contributors

• @l5d-bot made their first contribution in #12306
• @Adarsh-jaiss made their first contribution in #12254
• @wafuwafu13 made their first contribution in #12167

Full Changelog: edge-24.3.3...edge-24.3.4

edge-24.3.3

Overall Status: NOT RECOMMENDED; use edge-24.3.4 instead

Cautions

We recommend edge-24.3.4 instead of this release since edge-24.3.4 contains an important bugfix.

Changes

This edge release allows configuring the pod disruption budget via Helm (issue 11321, thanks Cemal Y. Dalar!).

What's Changed

• Add test for inbound policy index deletion by @adleong in #12143
• build(deps): bump tokio from 1.35.1 to 1.36.0 by @dependabot in #12217
• Parameterize PodDisruptionBudget config for Linkerd Control Plane components by @cdalar in #11687
• build(deps): bump bumpalo from 3.15.3 to 3.15.4 by @dependabot in #12226
• build(deps): bump socket2 from 0.5.5 to 0.5.6 by @dependabot in #12227
• build(deps): bump log from 0.4.20 to 0.4.21 by @dependabot in #12228
• build(deps): bump futures from 0.3.28 to 0.3.30 by @dependabot in #12230
• build(deps): bump chrono from 0.4.34 to 0.4.35 by @dependabot in #12229
• build(deps): bump github.com/prometheus/common from 0.49.0 to 0.50.0 by @dependabot in #12225
• build(deps): bump tj-actions/changed-files from 42.0.6 to 42.1.0 by @dependabot in #12243
• build(deps): bump cc from 1.0.83 to 1.0.90 by @dependabot in #12237
• build(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot in #12242
• build(deps): bump prometheus-client from 0.22.1 to 0.22.2 by @dependabot in #12241
• build(deps): bump github.com/go-openapi/spec from 0.20.15 to 0.21.0 by @dependabot in #12239
• build(deps): bump rustix from 0.38.28 to 0.38.31 by @dependabot in #12238
• build(deps-dev): bump eslint-plugin-react from 7.33.2 to 7.34.0 in /web/app by @dependabot in #12236
• build(deps-dev): bump @babel/core from 7.23.9 to 7.24.0 in /web/app by @dependabot in #12235
• build(deps): bump crc32fast from 1.3.2 to 1.4.0 by @dependabot in #12240
• build(deps): bump softprops/action-gh-release from 2.0.2 to 2.0.3 by @dependabot in #12247
• build(deps): bump thiserror from 1.0.57 to 1.0.58 by @dependabot in #12246
• build(deps): bump proc-macro2 from 1.0.78 to 1.0.79 by @dependabot in #12245
• build(deps): bump anyhow from 1.0.80 to 1.0.81 by @dependabot in #12244
• ci: Ensure integration status is set by @olix0r in #12257
• build(deps): bump helm.sh/helm/v3 from 3.14.2 to 3.14.3 by @dependabot in #12258
• build(deps): bump follow-redirects from 1.15.4 to 1.15.6 in /web/app by @dependabot in #12261
• build(deps): bump tj-actions/changed-files from 42.1.0 to 43.0.0 by @dependabot in #12259
• build(deps): bump softprops/action-gh-release from 2.0.3 to 2.0.4 by @dependabot in #12252
• ci: Retry failed integration tests by @olix0r in #12260
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #12251

New Contributors

• @cdalar made their first contribution in #11687

Full Changelog: edge-24.3.2...edge-24.3.3

edge-24.3.2

What's Changed

• build(deps): bump github.com/prometheus/common from 0.48.0 to 0.49.0 by @dependabot in #12184
• Use the correct resources attribute values for repair-controller by @relu in #12180
• build(deps): bump darling from 0.20.6 to 0.20.8 by @dependabot in #12177
• build(deps): bump num-traits from 0.2.17 to 0.2.18 by @dependabot in #12176
• build(deps): bump ryu from 1.0.16 to 1.0.17 by @dependabot in #12185
• build(deps): bump actions/download-artifact from 4.1.3 to 4.1.4 by @dependabot in #12192
• build(deps): bump pin-project from 1.1.3 to 1.1.4 by @dependabot in #12178
• build(deps): bump tj-actions/changed-files from 42.0.4 to 42.0.5 by @dependabot in #12163
• build(deps): bump query-string from 8.2.0 to 9.0.0 in /web/app by @dependabot in #12190
• build(deps-dev): bump eslint from 8.56.0 to 8.57.0 in /web/app by @dependabot in #12144
• identity: tweak token validation log levels by @zaharidichev in #12187
• build(deps): bump golang.org/x/tools from 0.18.0 to 0.19.0 by @dependabot in #12203
• build(deps): bump github.com/go-openapi/spec from 0.20.14 to 0.20.15 by @dependabot in #12202
• build(deps): bump mio from 0.8.10 to 0.8.11 by @dependabot in #12196
• build(deps): bump pest from 2.7.7 to 2.7.8 by @dependabot in #12198
• build(deps): bump http from 0.2.11 to 0.2.12 by @dependabot in #12197
• build(deps): bump ring from 0.17.7 to 0.17.8 by @dependabot in #12200
• build(deps): bump dyn-clone from 1.0.16 to 1.0.17 by @dependabot in #12199
• build(deps): bump ahash from 0.8.7 to 0.8.11 by @dependabot in #12207
• build(deps): bump pest_meta from 2.7.7 to 2.7.8 by @dependabot in #12208
• build(deps): bump EmbarkStudios/cargo-deny-action from 1.5.15 to 1.6.0 by @dependabot in #12211
• build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @dependabot in #12205
• build(deps-dev): bump webpack from 5.90.2 to 5.90.3 in /web/app by @dependabot in #12145
• build(deps-dev): bump @babel/preset-env from 7.23.9 to 7.24.0 in /web/app by @dependabot in #12189
• build(deps-dev): bump @babel/runtime from 7.23.9 to 7.24.0 in /web/app by @dependabot in #12188
• build(deps): bump pkg-config from 0.3.28 to 0.3.30 by @dependabot in #12206
• build(deps): bump pest_derive from 2.7.7 to 2.7.8 by @dependabot in #12209
• build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in #12204
• build(deps): bump cpufeatures from 0.2.11 to 0.2.12 by @dependabot in #12210
• build(deps): bump pin-project from 1.1.4 to 1.1.5 by @dependabot in #12219
• build(deps): bump anyhow from 1.0.79 to 1.0.80 by @dependabot in #12221
• build(deps): bump tj-actions/changed-files from 42.0.5 to 42.0.6 by @dependabot in #12222
• build(deps): bump EmbarkStudios/cargo-deny-action from 1.6.0 to 1.6.1 by @dependabot in #12223
• build(deps): bump hermit-abi from 0.3.8 to 0.3.9 by @dependabot in #12220
• build(deps): bump clap from 4.4.11 to 4.5.2 by @dependabot in #12218
• build(deps): bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in #12216

New Contributors

• @relu made their first contribution in #12180

Full Changelog: edge-24.3.1...edge-24.3.2

edge-24.3.1

With this release we're changing our Helm charts versioning scheme, to match the release version going forward. All the charts corresponding to this release are versioned as 2024.3.1.
Note the -edge suffix has been dropped, so no need to use the --devel flag for performing Helm installs or upgrades anymore.
These changes are fully backwards compatible.

What's Changed

• build(deps): bump http from 0.2.9 to 0.2.11 by @dependabot in #12137
• build(deps): bump itertools from 0.10.5 to 0.11.0 by @dependabot in #12140
• build(deps): bump scopeguard from 1.1.0 to 1.2.0 by @dependabot in #12141
• build(deps): bump serde_yaml from 0.9.29 to 0.9.32 by @dependabot in #12147
• build(deps): bump hermit-abi from 0.3.1 to 0.3.8 by @dependabot in #12150
• build(deps): bump google-github-actions/auth from 2.1.1 to 2.1.2 by @dependabot in #12151
• build(deps): bump codecov/codecov-action from 4.0.1 to 4.0.2 by @dependabot in #12152
• build(deps): bump url from 2.3.1 to 2.5.0 by @dependabot in #12149
• build(deps): bump rustls-pemfile from 1.0.1 to 1.0.4 by @dependabot in #12148
• build: Update fetch-proxy to support alternate repos by @olix0r in #12135
• build(deps): bump serde from 1.0.196 to 1.0.197 by @dependabot in #12139
• Export CRD templates by @mateiidavid in #12166
• build(deps): bump openssl-src from 300.2.1+3.2.0 to 300.2.3+3.2.1 by @dependabot in #12156
• build(deps): bump thread_local from 1.1.7 to 1.1.8 by @dependabot in #12157
• build(deps): bump base64 from 0.21.5 to 0.21.7 by @dependabot in #12159
• build(deps): bump codecov/codecov-action from 4.0.2 to 4.1.0 by @dependabot in #12161
• build(deps): bump actions/download-artifact from 4.1.2 to 4.1.3 by @dependabot in #12162
• build(deps): bump github.com/prometheus/common from 0.47.0 to 0.48.0 by @dependabot in #12146
• Simplify update-codegen script by @mateiidavid in #12165
• build(deps): bump extractions/setup-just from 1.6.0 to 2.0.0 by @dependabot in #12174
• build(deps): bump docker/setup-buildx-action from 3.0.0 to 3.1.0 by @dependabot in #12173
• Update steering committee membership requirements by @kflynn in #11942
• build(deps): bump bumpalo from 3.14.0 to 3.15.3 by @dependabot in #12168
• Add support for loadBalancerCluster to multi-cluster gateway service by @atoy3731 in #12116
• destination: Fix flakey TestEndpointProfileTranslator by @olix0r in #12182
• build(deps): bump openssl from 0.10.62 to 0.10.64 by @dependabot in #12158
• Fix CodeQL check with go v1.22 by @alpeb in #12183
• Automate edge releases by @alpeb in #12175

New Contributors

• @atoy3731 made their first contribution in #12116

Full Changelog: edge-24.2.5...edge-24.3.1

edge-24.2.5

What's Changed

• build(deps): bump serde_json from 1.0.109 to 1.0.114 by @dependabot in #12112
• build(deps): bump thiserror from 1.0.50 to 1.0.57 by @dependabot in #12108
• build(deps): bump darling from 0.20.3 to 0.20.6 by @dependabot in #12106
• build(deps-dev): bump webpack from 5.90.1 to 5.90.2 in /web/app by @dependabot in #12102
• build(deps): bump schannel from 0.1.22 to 0.1.23 by @dependabot in #12105
• build(deps): bump chrono from 0.4.24 to 0.4.34 by @dependabot in #12095
• build(deps): bump k8s.io/kube-aggregator from 0.29.1 to 0.29.2 by @dependabot in #12084
• build(deps): bump core-js from 3.35.1 to 3.36.0 in /web/app by @dependabot in #12101
• build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1 by @dependabot in #12077
• build(deps): bump k8s.io/endpointslice from 0.29.1 to 0.29.2 by @dependabot in #12091
• dev: v43 by @olix0r in #12117
• update SECURITY.md to edge releases by @wmorgan in #12118
• feat: support go1.22 by @chenrui333 in #12114
• Update repo references in helm docs by @olix0r in #12120
• build(deps): bump libc from 0.2.151 to 0.2.153 by @dependabot in #12130
• build(deps): bump iana-time-zone from 0.1.58 to 0.1.60 by @dependabot in #12127
• build(deps): bump async-trait from 0.1.74 to 0.1.77 by @dependabot in #12126
• build(deps): bump k8s.io/apiextensions-apiserver from 0.29.1 to 0.29.2 by @dependabot in #12121
• build(deps): bump google.golang.org/grpc from 1.61.1 to 1.62.0 by @dependabot in #12123
• build(deps): bump helm.sh/helm/v3 from 3.14.1 to 3.14.2 by @dependabot in #12124
• build(deps): bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 by @dependabot in #12125
• build(deps): bump unicode-normalization from 0.1.22 to 0.1.23 by @dependabot in #12129
• proxy: v2.222.0 by @olix0r in #12119
• build(deps): bump github.com/prometheus/common from 0.46.0 to 0.47.0 by @dependabot in #12122
• ci: Update release workflow to generate release notes by @olix0r in #12132
• edge-24.4.5 by @olix0r in #12133
• ci: Skip integration tests on metadata-only changes by @olix0r in #12134

New Contributors

• @chenrui333 made their first contribution in #12114

Full Changelog: edge-24.2.4...edge-24.2.5

stable-2.14.10

NOTE about 2.15 and beyond: As of February 2024, the Linkerd project is no longer producing open source stable release artifacts. Please read the 2.15 announcement for details.

See the full list of Linkerd releases for ways to get Linkerd.

stable-2.14.10

This stable release back-ports bugfixes and improvements from recent edge
releases.

• Introduced support for arbitrary labels in the podMonitors field in the
  control plane Helm chart (thanks @jseiser!) (#11222; fixes #11175)
• Added a prometheusUrl field for the heartbeat job in the control plane Helm
  chart (thanks @david972!) (#11343; fixes #11342)
• Updated the Destination controller to return INVALID_ARGUMENT status codes
  properly when a ServiceProfile is requested for a service that does not
  exist. (#11980)
• Reduced the load on the Destination controller by only processing Server
  updates on workloads affected by the Server (#12017)
• Changed how updates to a Server selector are handled in the destination
  service. When a Server that marks a port as opaque no longer selects a
  resource, the resource's opaqueness will reverted to default settings
  (#12031; fixes #11995)
• Fixed a race condition in the destination service that could cause panics
  under very specific conditions (#12022; fixes #12010)
• Fixed an issue where inbound policy could be incorrect after certain policy
  resources are deleted (#12088)

edge-24.2.4

This edge release corresponds to Linkerd version 2.15.

edge-24.2.4

• Updated the ExternalWorkload CRD to v1beta1, renaming the meshTls field to
  meshTLS (#12098)
• Updated the proxy to address some logging and metrics inconsistencies
  (#12099)

edge-24.2.3

edge-24.2.3

• Allowed the MutatingWebhookConfig timeout value to be configured (#12028)
  (thanks @mikebell90)
• Added a counter for items dropped from destination controller workqueue
  (#12079)
• Fixed a spurious linkerd check error when using container images with
  digests (#12059)
• Fixed an issue where inbound policy could be incorrect after certain policy
  resources are deleted (#12088)

edge-24.2.2

edge-24.2.2

This release addresses some issues in the destination service that could cause
it to behave unexpectedly when processing updates.

• Fixed a race condition in the destination service that could cause panics
  under very specific conditions (#12022; fixes #12010)
• Changed how updates to a Server selector are handled in the destination
  service. When a Server that marks a port as opaque no longer selects a
  resource, the resource's opaqueness will reverted to default settings
  (#12031; fixes #11995)
• Introduced Helm configuration values for liveness and readiness probe
  timeouts and delays (#11458; fixes #11453) (thanks @jan-kantert!)

edge-24.2.1

edge-24.2.1

This edge release contains performance and stability improvements to the
Destination controller, and continues stabilizing support for ExternalWorkloads.

• Reduced the load on the Destination controller by only processing Server
  updates on workloads affected by the Server (#12017)
• Changed how the Destination controller reacts to target clusters (in
  multicluster pod-to-pod mode) whose Server CRD is outdated: skip them and log
  an error instead of panicking (#12008)
• Improved the leader election of the ExternalWorkloads Endpoints controller to
  avoid missing events (#12021)
• Improved naming of EndpointSlices generated by ExternWorkloads (#12016)
• Restriced the number of IPs an ExternalWorkload can have (#12026)