stable-2.13.6

This stable release fixes a regression introduced in stable-2.13.0 which
resulted in proxies shedding load too aggressively while under moderate request
load to a single service (#11055). In addition, it updates the base image for
the linkerd-cni initcontainer to resolve a CVE in libdb (#11196), fixes a
race condition in the Destination controller that could cause it to crash
(#11163), as well as fixing a number of other issues.

• Control Plane

  • Fixed a race condition in the destination controller that could cause it to
    panic (#11169; fixes #11163)
  • Improved the granularity of logging levels in the control plane (#11147)

• Proxy

  • Changed the default HTTP request queue capacities for the inbound and
    outbound proxies back to 10,000 requests (#11198; fixes #11055)

• CLI

  • Updated extension CLI commands to prefer the --registry flag over the
    LINKERD_DOCKER_REGISTRY environment variable, making the precedence more
    consistent (thanks @harsh020!) (see #11144)

• CNI

  • Updated linkerd-cni base image to resolve CVE-2019-8457 in libdb
    (#11196)
  • Changed the CNI plugin installer to always run in 'chained' mode; the plugin
    will now wait until another CNI plugin is installed before appending its
    configuration (#10849)
  • Removed hostNetwork: true from linkerd-cni Helm chart templates
    (#11158; fixes #11141) (thanks @abhijeetgauravm!)

• Multicluster

  • Fixed the linkerd multicluster check command failing in the presence of
    lots of mirrored services (#10764)

edge-23.8.1

This edge release restores a proxy setting for it to shed load less aggressively
while under high load, which should result in lower error rates (see #11055). It
also removes the usage of host networking in the linkerd-cni extension.

• Changed the default HTTP request queue capacities for the inbound and outbound
  proxies back to 10,000 requests (see #11055 and #11198)
• Lifted need of using host networking in the linkerd-cni Daemonset (#11141)
  (thanks @abhijeetgauravm!)

edge-23.7.3

This edge release improves Linkerd's support for HttpRoute by allowing
parent_ref ports to be optional, allowing HttpRoutes to be defined in a
consumer's namespace, and adding support for the ResponseHeaderModifier filter.
It also fixes a panic in the destination controller.

• Added an option for disabling the network validator's security context for
  environments that provide their own
• Added high-availability (HA) mode for the multicluster service-mirror
• Added support for HttpRoute parent_refs that do not specify a port
• Fixed a Grafana error caused by an incorrect datasource (thanks @albundy83!)
• Added support for HttpRoutes defined in the consumer namespace
• Improved the granularity of logging levels in the control plane
• Fixed a race condition in the destination controller that could cause it to
  panic
• Added support for the ResponseHeaderModifier HttpRoute filter
• Updated extension CLI commands to prefer the --register flag over the
  LINKERD_DOCKER_REGISTRY environment variable, making the precedence more
  consistent (thanks @harsh020!)

edge-23.7.2

This edge release introduces support for HTTP filters configured through both
policy.linkerd.io and gateway.networking.k8s.io HTTPRoute resources.
Currently, RequestHeaderModifier and RequestRedirect HTTP filters are
supported. Additionally, this release fixes an issue with the linkerd-cni
chart.

• Added support for RequestHeaderModifier and RequestRedirect HTTP filters in
  outbound policy; filters may be added at the route or backend level
• Fixed missing resource-cni labels on linkerd-cni, this blocked the
  linkerd-cni pods from coming up when the injector was broken (thanks
  @migueleliasweb!)

edge-23.7.1

This edge release adds support for the upstream gateway.networking.k8s.io
HTTPRoute resource (in addition to the policy.linkerd.io CRD installed by
Linkerd). Furthermore, it fixes a bug where the ingress-mode proxy would fail to
fall back to ServiceProfiles for destinations without HTTPRoutes.

• Added support for gateway.networking.k8s.io HTTPRoutes in the policy
  controller
• Added distinguishable version information to proxy logs and metrics
• Fixed incorrect handling of NotFound client policies in ingress-mode proxies

edge-23.6.3

This edge release adds leader-election capabilities to the service-mirror
controller under the hood, as a precursor to HA mode in an upcoming release. It
also includes a linkerd viz tap improvement and a proxy startup bugfix, both
contributed by the community!

• Added leader-election capabilities to the service-mirror controller
• Added -o jsonpath flag to linkerd viz tap to allow filtering output fields
  (thanks @hiteshwani29!)
• Fixed proxy startup failure when using the config.linkerd.io/admin-port
  annotation (thanks @jclegras!)

stable-2.13.5

This stable release fixes a memory leak in the multicluster extension and fixes
an issue where the proxy was failing certain requests when running in ingress
mode.

• Fixed a memory leak in the service mirror controller
• Fixed an issue where the proxy would fail requests that were missing the
  l5d-dst-override header when run in ingress mode

edge-23.6.2

This edge release introduces timeout capabilities for HTTPRoutes in a manner
compatible with the proposed changes to HTTPRoute in
kubernetes-sigs/gateway-api#1997.

This release also includes several small improvements and fixes:

• A fix for HA validation checks when Linkerd is installed with Helm. Thanks
  @mikutas!!
• Build improvements for multi-arch build artifacts. Thanks @MarkSRobinson!!

edge-23.6.1

This edge release changes the behavior of the CNI plugin to run exclusively in
"chained mode". Instead of creating its own configuration file, the CNI plugin
will now wait until a conf file exists before appending its configuration.
Additionally, this change includes a bug fix for topology aware service
routing.

• Changed the CNI plugin installer to always run in 'chained' mode; the plugin will
  now wait until another CNI plugin is installed before appending its
  configuration
• Fixed bug where topology routing would not disable while service was under
  load (thanks @MarkSRobinson!)
• Introduced logFormat value to the multicluster Link Helm Chart (thanks
  @bunnybilou!)

stable-2.13.4

This stable release fixes a few issues in the proxy and in the outbound policy
API. Two new configuration options are also introduced to configure the
outbound (and inbound) cache discovery idle period for proxies. The
configuration is supported through annotations and through Helm values.

• Control Plane
  • Fixed an issue where the namespace field on HTTPRoute backendRefs was
    ignored, and the backend Service would always be assumed to be in the
    namespace as the parent Service
  • Fixed an issue where default authorizations generated for readiness and
    liveness probes would fail if the probe path included URI query parameters
  • Added the ability to configure the proxy's discovery cache timeouts with
    the config.linkerd.io/proxy-outbound-discovery-cache-unused-timeout and
    config.linkerd.io/proxy-inbound-discovery-cache-unused-timeout annotations
  • Fixed bug where topology routing would not disable while service was under
    load (thanks @MarkSRobinson!)
• Proxy
  • Fixed an issue where meshed pods could not communicate with themselves
    through a ClusterIP Service
  • Fixed an issue with W3C trace context propagation which caused proxy spans
    to be siblings rather than children of their original parent (thanks
    @whiskeysierra)
  • Fixed the proxy not using gRPC response classification for gRPC requests to
    destinations without ServiceProfiles
• Helm
  • Introduced outbound/inbound cache discovery cache idle timeout
    configuration values