linkerd2
linkerd2 copied to clipboard
Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
### What is the issue? Hello, Linkerd's community! I'm researching the problem, that **linkerd-proxy** send outbound requests to **outdated** Pod IP (already **dead** Pod IP). This is especially true for...
### What is the issue? Setup: 1, Multicluster setup - east and west cluster with common trust certs 2. east cluster has a Minio server setup which hosts a service...
### What is the issue? We have deployed all required deployments but Service failover or HTTPRoute is not working as expected. configs ``` --- apiVersion: policy.linkerd.io/v1beta2 kind: HTTPRoute metadata: name:...
### Discussed in https://github.com/linkerd/linkerd2/discussions/12009 Originally posted by **NikitaCloudRuntime** January 29, 2024 Hi there :) sorry for bringing up a new question but sadly after hours of debugging I was unable...
### What problem are you trying to solve? Linkerd 2.14 introduced pod-to-pod cluster linking, which simplifies setup and removes need of additional Load Balancers. With this change configuration of routing...
### What is the issue? We have deployed Linkerd stable v2.14.0 on GKE v1.24. We configured a service profile for an application, and the routes were getting added, but we...
When the destination controller receives an update for a Server resource, we recompute opaqueness ports for all pods. This results in a large number of updates to all endpoint profile...
### What is the issue? Meshed pods have all ports redirected to linkerd-proxy sidecar and as such all ports are open at the TCP level. This means probes with [TCPSocketAction](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.22/#tcpsocketaction-v1-core)...
When looking through https://github.com/linkerd/linkerd2/issues/11494 I noticed some of the error handling in the service-mirror's main routine could be improved. For example: * [When we load cluster credentials, we only log...
Someone recently brought [this thread](https://twitter.com/thockin/status/1560398986120376320) to my attention. Tim argues that applications must continue to handle new connections/requests after receiving SIGTERM. In short: 1. When kubelet decides to terminate a...