Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
APACHE-2.0 License
Bot releases are hidden (Show)
Published by kleimkuhler over 4 years ago
This release introduces substantial proxy improvements, resulting from continued
profiling & performance analysis. Also support for Kubernetes 1.17 was improved.
To install this release, run: curl https://run.linkerd.io/install | sh
Full release notes:
request_errors_total
metric exposing the number of requests thatPublished by alpeb over 4 years ago
This release includes the results from continued profiling & performance
analysis on the Linkerd proxy. In addition to modifying internals to prevent
unwarranted memory growth, new metrics were introduced to aid in debugging and
diagnostics.
Also, Linkerd's CNI plugin is out of experimental, check out the docs at
https://linkerd.io/2/features/cni/ !
CLI
linkerd stat
command (thankslinkerd top
output (thankslinkerd metrics
that was causing a panic when port-forwardinglinkerd check
verifying the number of replicas for Linkerdlinkerd upgrade
's output that are no longerController
(x-linkerd-retryable)
via OpenAPI spec (thanks @kohsheen1234!)Proxy
request_errors_total
metric exposing the number of requests thatHelm
enforcedHostRegexp
variable to allow configuring theInternal
Published by adleong over 4 years ago
This release adds support for integrating Linkerd's PKI with an external certificate issuer such as cert-manager
as well as streamlining the certificate rotation process in general. For more details about cert-manager and certificate rotation, see the docs. This release also includes performance improvements to the dashboard, reduced memory usage of the proxy, various improvements to the Helm chart, and much much more.
To install this release, run: curl https://run.linkerd.io/install | sh
Upgrade notes: This release includes breaking changes to our Helm charts.
Please see the upgrade instructions.
Special thanks to: @alenkacz, @bmcstdio, @daxmc99, @droidnoob, @ereslibre,
@javaducky, @joakimr-axis, @JohannesEH, @KIVagant, @mayankshah1607,
@Pothulapati, and @StupidScience!
Full release notes:
tap
APIService check to aid with uncovering Kubernetes APIlinkerd check --pre --linkerd-cni-enabled
beforelinkerd check
after installation if the CNI plugin is--as-group
flag so that users can impersonatelinkerd check
to ensure that the kube-system
config.linkerd.io/admission-webhooks:disabled
--skip-inbound-ports
and --skip-outbound-ports
(thanks to @javaducky!)linkerd check --pre
check
and upgrade
commands--identity-issuer-certificate-file
,--identity-issuer-key-file
and identity-trust-anchors-file
to linkerd upgrade
to support trust anchor and issuer certificate rotation--namespace
and --all-namespaces
Dashboard.Replicas
parameter to the Linkerd Helm chart to allowuninject
command to work with namespace resources--identity-external-issuer
flag to linkerd install
thatcert-manager
)linkerd inject
(thankslinkerd check --preinstall
ensuring Kubernetes Secretslinkerd tap
sometimes displaying incorrect pod names for unmeshedlinkerd install --ignore-cluster
and --skip-checks
fasterlinkerd upgrade
to fail when used with--from-manifest
--cluster-domain
an install-only flag (thanks @bmcstdio!)check
to ensure that proxy trust anchors match configurationlinkerd stat
command that requires a window sizelinkerd-web
service--wait-before-exit-seconds
flag to linkerd inject for the proxyconntrack
to the debug
container to help with connection trackingtap
where mismatch cluster domain and trust domain causedtap
to hangidentity
RBAC resource which caused start up errorscert-mananger
) to the linkerd-identity
servicenoInitContainer
parameter to cniEnabled
helm install
where the lists of ignored inbound andlinkerd-cni
Helm chart not setting proper namespace annotationslinkerd check
to the dashboard in the /controlplane
viewtap
expanded view in theHost:
header validation to the linkerd-web
service, to protectlinkerd.io/inject
is either enabled
or disabled
tap
, injector
and sp-validator
to usehelm upgrade
due to not being restarteddebug
containerdoc
command to auto-generate documentation for the proxy--trace-collector
and --trace-collector-svc-account
flags tolinkerd inject
that configures the OpenCensus trace collector used by--control-plane-tracing
flag to linkerd install
that enablesPublished by adleong over 4 years ago
This edge release is a release candidate for stable-2.7
and fixes an issue
where the proxy could consume inappropriate amounts of memory.
grpc-status
headers when signaling proxy errors toPublished by ihcsim over 4 years ago
This edge release is a release candidate for stable-2.7
.
The linkerd check
command has been updated to improve the control plane
debugging experience.
tap
APIService check to aid with uncovering Kubernetes APIPublished by kleimkuhler over 4 years ago
This edge release is a release candidate for stable-2.7
.
An update to the Helm charts has caused a breaking change for users who
have installed Linkerd using Helm. In order to make the purpose of the
noInitContainer
parameter more explicit it has been renamed to cniEnabled
.
linkerd check --pre --linkerd-cni-enabled
beforelinkerd check
after installation if the CNI plugin is--as-group
flag so that users can impersonatenoInitContainer
parameter to cniEnabled
helm install
where the lists of ignored inbound andPublished by zaharidichev almost 5 years ago
linkerd check
to ensure that the kube-system
config.linkerd.io/admission-webhooks:disabled
linkerd.io/inject
is either enabled
or disabled
Published by hawkw almost 5 years ago
This edge release includes experimental improvements to the Linkerd proxy's
request buffering and backpressure infrastructure.
Additionally, we've fixed several bugs when installing Linkerd with Helm,
updated the CLI to allow using both port numbers and port ranges with the
--skip-inbound-ports
and --skip-outbound-ports
flags, and fixed a dashboard
error that can occur if the dashboard is open in a browser while updating Linkerd.
Note: The linkerd-proxy
version included with this release is more
experimental than usual. We'd love your help testing, but be aware that there
might be stability issues.
--skip-inbound-ports
and --skip-outbound-ports
(thanks to @javaducky!)linkerd-web
servicelinkerd-cni
Helm chart not setting proper namespace annotationsPublished by cpretzer almost 5 years ago
This edge release adds support for pod IP and service cluster IP lookups, improves performance of the dashboard, and makes linkerd check --pre
perform more comprehensive checks.
The --wait-before-exit-seconds
flag has been added to allow Linkerd users to opt in to preStop hooks
. The details of this change are in #3798.
Also, the proxy has been updated to v2.82.0
which improves gRPC error classification and ensures that resolutions are released when the associated balancer becomes idle.
Finally, an update to follow best practices in the Helm charts has caused a breaking change. Users who have installed Linkerd using Helm must be certain to read the details of #3822
linkerd check --pre
check
and upgrade
commands--wait-before-exit-seconds
flag to linkerd inject for the proxy sidecar to delay the start of its shutdown process (a huge commit from @KIVagant, thanks!)Published by adleong almost 5 years ago
This release improves proxy stability by fixing a bug where the proxy could stop
receiving service discovery updates, resulting in 503 errors.
To install this release, run: curl https://run.linkerd.io/install | sh
Full release notes:
Published by alpeb almost 5 years ago
--identity-issuer-certificate-file
,--identity-issuer-key-file
and identity-trust-anchors-file
to linkerd upgrade
to support trust anchor and issuer certificate rotationPublished by kleimkuhler almost 5 years ago
linkerd stat
command that requires a window sizePublished by zaharidichev almost 5 years ago
This edge release includes improvements to the CLI, along with some internal bug fixes.
--namespace
and --all-namespaces
tap
, injector
and sp-validator
to usehelm upgrade
due to not being restartedPublished by ihcsim almost 5 years ago
This edge release adds the linkerd check
function to the dashboard, along some other CLI and Web UI improvements.
Dashboard.Replicas
parameter to the Linkerd Helm chart to allowlinkerd check
to the dashboard in the /controlplane
viewtap
expanded view in thePublished by ihcsim almost 5 years ago
This edge release includes a number of dashboard, CLI and proxy log improvement and bug fixes.
uninject
command to work with namespace resourcesconntrack
to the debug
container to help with connection trackingtap
where mismatch cluster domain and trust domain causedtap
to hangidentity
RBAC resource which caused start up errorsdebug
containerdoc
command to auto-generate documentation for the proxyPublished by hawkw almost 5 years ago
This edge release adds support for integrating Linkerd's PKI with an external
certificate issuer such as [cert-manager
], adds distributed tracing support to
the Linkerd control plane, and adds protection against DNS rebinding attacks to
the web dashboard. In addition, it includes several improvements to the Linkerd
CLI.
--identity-external-issuer
flag to linkerd install
thatcert-manager
)linkerd inject
(thankslinkerd check --preinstall
ensuring Kubernetes Secretslinkerd tap
sometimes displaying incorrect pod names for unmeshedcert-mananger
) to the linkerd-identity
serviceHost:
header validation to the linkerd-web
service, to protect--trace-collector
and --trace-collector-svc-account
flags tolinkerd inject
that configures the OpenCensus trace collector used by--control-plane-tracing
flag to linkerd install
that enablesAlso, thanks to @joakimr-axis for several fixes and improvements to internal
build scripts!
Published by zaharidichev almost 5 years ago
This edge release adds dashboard UX enhancements, and improves the speed of the CLI.
linkerd install --ignore-cluster
and --skip-checks
fasterlinkerd upgrade
to fail when used with--from-manifest
Published by cpretzer about 5 years ago
This edge release adds support for headless services, improves the upgrade
process after installing Linkerd with a custom cluster domain, and enhances
the check
functionality to report invalid trust anchors.
--cluster-domain
an install-only flag (thanks @bmcstdio!)check
to ensure that proxy trust anchors match configurationPublished by scottcarol about 5 years ago
This release introduces distributed tracing support, adds request and response
headers to linkerd tap
, dramatically improves the performance of the dashboard
on large clusters, adds traffic split visualizations to the dashboard, adds a
public Helm repo, and many more improvements!
For more details, see the announcement blog post:
https://linkerd.io/2019/10/10/announcing-linkerd-2.6/
To install this release, run: curl https://run.linkerd.io/install | sh
Upgrade notes: Please see the upgrade
instructions.
Special thanks to: @alenkacz, @arminbuerkle, @bmcstdio, @bourquep,
@brianstorti, @kevtaylor, @KIVagant, @pierDipi, and @Pothulapati!
Full release notes:
json
output option to the linkerd tap
command, which exposes--address
flag to linkerd dashboard
, allowing users to specify--cluster-domain
flag to the linkerd install
command that allows--disable-heartbeat
flag for linkerd install | upgrade
commandscadvisor
metrics,config.linkerd.io/trace-collector
andconfig.alpha.linkerd.io/trace-collector-service-account
pod specconfig.linkerd.io/admission-webhooks: disabled
label (thanks @hasheddan!)Linkerd Namespace
Grafana dashboard, allowing users to viewlinkerd stat deploy -n myNs
(thanks @bourquep!)1.12.9
for controller builds to include security1.16
v12.0.0
Published by scottcarol about 5 years ago
This edge release is a release candidate for stable-2.6
.
stable-2.6
.