Aleksandr Tarasov

@sreeyadlapati it looks like an issue that I faced and I've updated the docs: https://linkerd.io/2.11/tasks/manually-rotating-control-plane-tls-credentials/#removing-the-old-trust-anchor. ``` We can now remove the old trust anchor from the trust bundle we created...

@olix0r it was the first that I did. I've added this `ServerAuthorization` to allow kubelet requests pods: ``` --- apiVersion: policy.linkerd.io/v1beta1 kind: ServerAuthorization metadata: namespace: coolns name: allow-healthchecks spec: server:...

@kleimkuhler Hi! No, it is not working. If we omit `serving-port` then healthchecks are not passed for the main container. They are passed for Linkerd only. As you could on...

@adleong @kleimkuhler Hi again. I've checked how Istio does it and think that we can do something similar. I do not know well Linkerd implementation specifics, but I create some...

@chriskim06 yep. We have already deleted them and everything works good 👍

@afzal-idfy Could you plz explain your load in the details? At least, how much time do you generate the load? It looks like you do the load for a very...

@hao1939, you can use Prometheus metrics (`inbound_http_authz_deny_total` and `inbound_tcp_authz_deny_total`) to observe and alert the denies to minimize the potential issues: ``` - alert: Denied TCP requests by auth policies for...