Oliver Gould

@Fantaztig Grepping the templates is probably the best way for now. E.g. ```text :; linkerd install --ignore-cluster | grep WebhookConfig -A2 kind: ValidatingWebhookConfiguration metadata: name: linkerd-sp-validator-webhook-config -- kind: ValidatingWebhookConfiguration metadata:...

You could try running `linkerd diagnostics endpoints otel-agent.open-telemetry.svc.cluster.local:4317` to query the destination controller directly--this would help us know whether the destination controller hasn't seen those changes or if the proxy...

I tried this locally with a trivial setup and wasn't able to encounter this error easily: Setup a local cluster with multiple nodes: ``` :; k3d cluster create l5d-test --kubeconfig-update-default...

> Do you know if this command picks one destination pod at random or queries all pods? Yeah, it's going to port forward to a random destination controller > I...

The fact that the identity controller is in crash loop probably points to it being a CNI/proxy-init related issue. We are aware of a likely bug in the Azure CNI....

> `linkerd-proxy [ 118.692279s] WARN ThreadId(02) identity:controller{addr=linkerd-identity-headless.linkerd.svc.cluster.local:8080}:endpoint{addr=10.244.3.137:8080}: linkerd_reconnect: Failed to connect error=received corrupt message` In this situation, I would look at the pod with IP `10.244.3.137` to see what it's...

It's possible this is related to #8296. I've pushed a proxy image (which will be included in this week's edge release) that can be used for testing: `ghcr.io/olix0r/l2-proxy:main.c7b9c6565`.

@ayushiaks I don't think we have enough information to make any progress on this. My suspicion is that this has something to do with your cluster networking setup, but that's...

> `WARN ThreadId(01) policy:watch{port=8090}:controller{addr=localhost:8090}:endpoint{addr=127.0.0.1:8090}: linkerd_reconnect: Failed to connect error=Connection refused (os error 111)` This error indicates that the `policy` container is not running--the proxy can't connect to the controller on...

@zigmund Are you able to test the most recent stable version (2.11.1)? There were a number of changes in this release that could improve memory usage, notably moving from the...