Alejandro Pedraza

> @alpeb WDYT about doing updates for the cert rotation docs? Will do. I've also updated the comment above to include my review of the CNI docs.

I've added more comments about CNI: This sentence ``` If you change a default when running linkerd install-cni, you will want to ensure that you make a corresponding change when...

What's described under https://linkerd.io/2.10/tasks/exporting-metrics/ is simply for exporting Linkerd's Prometheus data into a separate, probably longer-lived, Prometheus instance. So the separate Prometheus instance only needs to scrape one endpoint, i.e....

Turns out the Lokomotive project, which embeds linkerd, already provides a ServiceMonitor: https://github.com/kinvolk/lokomotive/blob/master/assets/charts/components/linkerd2/templates/service-monitors.yaml We'd be glad to include something like that as an optional resource in the linkerd2 repo itself...

Also now that linkerd/linkerd2#3194 has merged, we should point out that these annotations are also available at the namespace level

@grampelberg This has been proved harder than initially thought. We need kubernetes to give us back a intermediate cert we can use as our trust anchor. IIUC, that means the...

It appears it's a known Kubernetes limitation: > Current signer does not support URL SANs or issuing CA intermediates (#80057) kubernetes/kubernetes#69836 kubernetes/kubernetes#80057

Hi folks, thank you all for the continued feedback! We finally released a new linkerd-cni version fixing this issue: https://github.com/linkerd/linkerd2-proxy-init/releases/tag/cni-plugin%2Fv1.6.0 It's not yet referred to as the default version in...

Thanks for the detailed report @pdefreitas 👍 I haven't been able to reproduce the issue (also tried with AKS 1.30.5 running Azure CNI Node Subnet), but looking at the source...

Ok I was able to make this work by doing `inotifywait -m /var/run/secrets/kubernetes.io/serviceaccount -e moved_to` and checking if the event's filename is `..data`. @rootik I just want to double-check if...