linkerd2
linkerd2 copied to clipboard
linkerd
Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
### What is the issue? `linked check` on 2.12 does not work when run on a cluster with an older version of Linkerd installed. ### How can it be reproduced?...
Per #9272, it seems that hyper's [`hyper::client::Builder::retry_canceled_requests`](https://docs.rs/hyper/0.14.20/hyper/client/struct.Builder.html#method.retry_canceled_requests) doesn't work as we might expect. Specifically, if a server applies a header read timeout and a client makes requests at an interval...
### What is the issue? Using own prometheus instance, especially in different namespace - hearthbeat fails due to hardcoded url in helm chart - `https://github.com/linkerd/linkerd2/blob/main/charts/linkerd-control-plane/templates/heartbeat.yaml#L63` ### How can it be...
`linkerd diagnostics endpoints` is a useful tool for debugging service discovery, but we don't have any equivalent for the (newer) policy API. We should!
### What problem are you trying to solve? Old `ServerAuthorization` can be attached to a bunch of `Server` resources via selectors. It helps to make some common policies that avoids...
### What problem are you trying to solve? After the split of crds and control-plan helm charts in https://github.com/linkerd/linkerd2/issues/6620, there is no mechanism for how to wait for crds to...
### What is the issue? Using the linkerd-cni together with Cilium seems to no longer work. It appears that linkerd-cni no longer removes the `.conf` file created by Cilium `/etc/cni/net.d/05-cilium.conf`...
## Feature Request ### What problem are you trying to solve? In order to standardize authentication patterns across the mesh, one can run external auth at the ingress level; however,...
Currently, the `linkerd viz install` command generates policy resources to authorize scrapes in the `linkerd-viz` namespace. However, these resources are different than the ones generated by the `linkerd viz allow-scrapes`...
### What problem are you trying to solve? In some cases, it is desirable to allow traffic that originates from a pod to another container in that pod, without allowing...