This edge release includes experimental improvements to the Linkerd proxy's
request buffering and backpressure infrastructure.

Additionally, we've fixed several bugs when installing Linkerd with Helm,
updated the CLI to allow using both port numbers and port ranges with the
--skip-inbound-ports and --skip-outbound-ports flags, and fixed a dashboard
error that can occur if the dashboard is open in a browser while updating Linkerd.

Note: The linkerd-proxy version included with this release is more
experimental than usual. We'd love your help testing, but be aware that there
might be stability issues.

• CLI
  • Added the ability to pass both port numbers and port ranges to
    --skip-inbound-ports and --skip-outbound-ports (thanks to @javaducky!)
• Controller
  • Fixed a race condition in the linkerd-web service
  • Updated Prometheus to 2.15.2 (thanks @Pothulapati)
• Web UI
  • Fixed an error when refreshing an already open dashboard when the Linkerd
    version has changed
• Proxy
  • Internal changes to the proxy's request buffering and backpressure
    infrastructure
• Helm
  • Fixed the linkerd-cni Helm chart not setting proper namespace annotations
    and labels
  • Fixed certificate issuance lifetime not being set when installing through
    Helm
  • More improvements to Helm best practices (thanks to @Pothulapati!)

This edge release adds support for pod IP and service cluster IP lookups, improves performance of the dashboard, and makes linkerd check --pre perform more comprehensive checks.

The --wait-before-exit-seconds flag has been added to allow Linkerd users to opt in to preStop hooks. The details of this change are in #3798.

Also, the proxy has been updated to v2.82.0 which improves gRPC error classification and ensures that resolutions are released when the associated balancer becomes idle.

Finally, an update to follow best practices in the Helm charts has caused a breaking change. Users who have installed Linkerd using Helm must be certain to read the details of #3822

• CLI
  • Increased the comprehensiveness of linkerd check --pre
  • Added TLS certificate validation to check and upgrade commands
• Controller
  • Increased minimum kubernetes version to 1.13.0
  • Added support for pod ip and service cluster ip lookups in the destination service
  • Added recommended kubernetes labels to control-plane
  • Added the --wait-before-exit-seconds flag to linkerd inject for the proxy sidecar to delay the start of its shutdown process (a huge commit from @KIVagant, thanks!)
  • Added a pre-sign check to the identity service
• Web UI
  • Increased the speed of the dashboard by pausing network activity when the dashboard is not visible to the user
• Proxy
  • Added a timeout to release resolutions to idle balancers
  • Improved error classification for gRPC services
• Internal
  • Breaking Change Updated Helm charts to follow best practices using proper casing (thanks @Pothulapati!)

This release improves proxy stability by fixing a bug where the proxy could stop
receiving service discovery updates, resulting in 503 errors.

To install this release, run: curl https://run.linkerd.io/install | sh

Full release notes:

• Proxy
  • Fixed a bug where the proxy could stop receiving service discovery updates,
    resulting in 503 errors
  • Improved debug/error logging to include detailed contextual information

edge-19.12.2

• CLI
  • Added support for injecting CronJobs and ReplicaSets, as well as the ability
    to use them as targets in the CLI subcommands
  • Introduced the new flags --identity-issuer-certificate-file,
    --identity-issuer-key-file and identity-trust-anchors-file to linkerd upgrade to support trust anchor and issuer certificate rotation
• Controller
  • Fixed inject failures for pods with security context capabilities
• Web UI
  • Added support for CronJobs and ReplicaSets, including new Grafana dashboards
    for them
• Proxy
  • Fixed a bug where the proxy could stop receiving service discovery updates,
    resulting in 503 errors
• Internal
  • Moved CNI template into a Helm chart to prepare for future publication
  • Upgraded the Prometheus Go client library to v1.2.1 (thanks @daxmc99!)
  • Reenabled certificates rotation integration tests

edge-19.12.1

• CLI
  • Added condition to the linkerd stat command that requires a window size
    of at least 15 seconds to work properly with Prometheus
• Internal
  • Fixed whitespace path handling in non-docker build scripts (thanks
    @joakimr-axis!)
  • Removed Calico logutils dependency that was incompatible with Go 1.13
  • Updated Helm templates to use fully-qualified variable references based
    upon Helm best practices (thanks @javaducky!)

This edge release includes improvements to the CLI, along with some internal bug fixes.

• CLI
  • Added a check that ensures using --namespace and --all-namespaces
    results in an error as they are mutually exclusive
• Internal
  • Fixed an issue causing tap, injector and sp-validator to use
    old certificates after helm upgrade due to not being restarted
  • Fixed incomplete Swagger definition of the tap api, causing benign
    error logging in the kube-apiserver

This edge release adds the linkerd check function to the dashboard, along some other CLI and Web UI improvements.

• CLI
  • Added a Dashboard.Replicas parameter to the Linkerd Helm chart to allow
    configuring the number of dashboard replicas (thanks @KIVagant!)
  • Removed redundant service profile check (thanks @alenkacz!)
• Web UI
  • Added linkerd check to the dashboard in the /controlplane view
  • Added request and response headers to the tap expanded view in the
    dashboard
• Internal
  • Removed the destination container from the linkerd-controller deployment as
    it now runs in the linkerd-destination deployment
  • Upgraded Go to version 1.13.4

This edge release includes a number of dashboard, CLI and proxy log improvement and bug fixes.

• CLI
  • Updated uninject command to work with namespace resources
    (thanks @mayankshah1607!)
• Controller
  • Added conntrack to the debug container to help with connection tracking
    debugging
  • Fixed a bug in tap where mismatch cluster domain and trust domain caused
    tap to hang
  • Fixed an issue in the identity RBAC resource which caused start up errors
    in k8s 1.6 (thanks @Pothulapati!)
• Proxy
  • Improved debug/error logging to include detailed contextual information
• Web UI
  • Added filter to namespace select button
  • Improved how empty tables are displayed
• Internal
  • Added integration test for custom cluster domain
  • Allowed the control plane to be injected with the debug container
  • Updated proxy image build script to support HTTP proxy options
    (thanks @joakimr-axis!)
  • Updated the CLI doc command to auto-generate documentation for the proxy
    configuration annotations (thanks @StupidScience!)

edge-19.10.5

This edge release adds support for integrating Linkerd's PKI with an external
certificate issuer such as [cert-manager], adds distributed tracing support to
the Linkerd control plane, and adds protection against DNS rebinding attacks to
the web dashboard. In addition, it includes several improvements to the Linkerd
CLI.

• CLI
  • Added a new --identity-external-issuer flag to linkerd install that
    configures Linkerd to use certificates issued by an external certificate
    issuer (such as cert-manager)
  • Added support for injecting a namespace to linkerd inject (thanks
    @mayankshah1607!)
  • Added checks to linkerd check --preinstall ensuring Kubernetes Secrets
    can be created and accessed
  • Fixed linkerd tap sometimes displaying incorrect pod names for unmeshed
    IPs that match multiple running pods
• Controller
  • Added support for using trust anchors from an external certificate issuer
    (such as cert-mananger) to the linkerd-identity service
• Web UI
  • Added Host: header validation to the linkerd-web service, to protect
    against DNS rebinding attacks
• Internal
  • Added new --trace-collector and --trace-collector-svc-account flags to
    linkerd inject that configures the OpenCensus trace collector used by
    proxies in the injected workload (thanks @Pothulapati!)
  • Added a new --control-plane-tracing flag to linkerd install that enables
    distributed tracing in the control plane (thanks @Pothulapati!)
  • Added distributed tracing support to the control plane (thanks
    @Pothulapati!)

Also, thanks to @joakimr-axis for several fixes and improvements to internal
build scripts!

This edge release adds dashboard UX enhancements, and improves the speed of the CLI.

• CLI
  • Made linkerd install --ignore-cluster and --skip-checks faster
  • Fixed a bug causing linkerd upgrade to fail when used with
    --from-manifest
• Web UI
  • Made the dashboard sidebar component responsive
  • Changed the navigation bar color to the one used on the Linkerd website