Oliver Gould

Closing this, as we don't have enough information to reproduce this problem. Please let us know if this problem persists.

Can you include details on how you installed Linkerd and Viz (Helm? CLI?). Certificates are typically generated during installation (or configured to be managed by something like Cert Manager). How...

Unassigning @adleong so that this bubbles back up for prioritization. Since this branch isn't passing CI, it will clearly need some more work before it can be merged.

In your environment, is the client running meshed with a sidecar proxy? Or is only the server process meshed? > We've adjusted the default timeouts, but timeout logs are still...

@yogenderPalChandra Can you include the output of `linkerd diagnostics proxy-metrics ... | grep 5432` against the client and server pods? The metrics dumps will more reliably indicate usage than the...

The edges view only includes currently-open connections. Given that the connection was open and closed, it won't be included in the viz tooling: ``` outbound_tcp_route_open_total{parent_group="core",parent_kind="Service",parent_namespace="dblin",parent_name="mydb-service",parent_port="5432",parent_section_name="",route_group="",route_kind="default",route_namespace="",route_name="opaq",target_ip="",target_port="5432"} 1 outbound_tcp_route_close_total{parent_group="core",parent_kind="Service",parent_namespace="dblin",parent_name="mydb-service",parent_port="5432",parent_section_name="",route_group="",route_kind="default",route_namespace="",route_name="opaq",target_ip="",target_port="5432",error=""} 1 ``` All...

Thanks for the very detailed overview. We should be able to take a deeper look at this next week.

Can you elaborate on what you mean by: > Note: That the service account token can be mounted manually as a volume Are you asking that the Linkerd helm charts...

Is it a viable solution for Linkerd to simply _always_ disable `automountServiceAccountToken` and to update the charts to include the required projected volumes? It substantially increases the maintenance and support...

Given that token projection has been stable since Kubernetes 1.20, I think we'd accept a PR that implements the change I described. Otherwise, this enhancement will be added to our...