Alejandro Pedraza

The serviceAccountToken file mode being hard-coded to 0600 (kubernetes/kubernetes#82573) was fixed in k8s 1.19. After that, the file mode got to be 0644 if no fsGroup was set (see the...

Hi @iwilltry42, any updates on this? We're finally adding IPv6 support for linkerd and would love to be able to have this tested via our current k3d-based integration tests suite.

@smithdebug , would you be willing to tackle this issue? Sounds like a relatively simple setting to add and hook in the helm templates.

Thanks for opening #12028, we'll take a look at it soon. OTOH, we're still interested on why you actually bumped into this issue. The proxy injector should not take that...

> Is this up for grabs? Seems it's been a few months since the last comment, and not seeing any commits to address it Yep, this hasn't been addressed yet.

Anybody would like to submit a PR with this policy included? Should be pretty straight-forward. @prajithp13 Did you apply the policy?

@deepto98 sounds great, please proceed!

Seems this has gotten stale, so closing for now. Please reopen a new PR if you're still interested in moving this forward.

Can you clarify how is the linkerd-cni failing to start? (e.g. logs, events, status)

Ok thanks for the clarification. We've released a new version for linkerd-cni that might be able to better catch when the network CNI config changes. Can you give it a...