Oliver Gould

Perhaps related to https://github.com/hyperium/http/issues/507 https://github.com/hyperium/http/pull/515

Note that https://github.com/hyperium/hyper/pull/2737 added a `message` helper

I suggest using [`tracing`](https://tokio-rs.github.io/tracing/tracing/) to view the logs from the `h2` crate -- it should log as capacity is released, which should be done here: https://github.com/hyperium/hyper/blob/84b78b6c877ff9aaa28d1e348a5deb63a9282503/src/body/body.rs#L321

I lose about 50% of the issues I write due to muscle-memory close-saving it. I love writing issues in the editor but I'm desperate for a way to stop losing...

Notably, even the merge of #7601 (f2ad5a9 [log](https://github.com/linkerd/linkerd2/runs/4843870594?check_suite_focus=true)) failed on this test: ``` --- FAIL: TestPolicy (494.98s) --- FAIL: TestPolicy/linkerd_viz_stat_srv_-n_linkerd-stat-authz-test (180.35s) policy_test.go:146: Unexpected success rate for [emoji-grpc], got [-] FAIL...

There's a lot written here--too much to reply to all of the points individually. Generally: we chose to use TrafficSplit because it was cheap and low risk to implement. This...

@bothra90 It looks like that pod doesn't have a service account token so it can't authenticate to obtain its identity certificate. Can you confirm that these resources exist: ```text :;...

@bothra90 Yeah, that sounds plausible. The Linkerd project doesn't currently have any EKS credits, so I can't confirm this for myself; but it sounds likely, since the proxy runs under...

We've recently added support for projected bounded service account tokens in https://github.com/linkerd/linkerd2/pull/7117, though I'm not sure if that will actually resolve this issue. Are you able to test the latest...

@rltvty As far as I understand, the report you've received isn't actually about #7117. I believe it's reporting that the policy controller in 2.11.1 doesn't reload its service account tokens...