diff --git a/CHANGES.md b/CHANGES.md index 20ca3a1e58bc7..d20e2863c04ff 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,5 +1,31 @@ # Changes +## stable-2.14.5 + +This stable release fixes a proxy regression where bursts of TCP connections +could result in EOF errors, due to an incorrect queue capacity. In addition, it +includes fixes for the control plane, dependency upgrades, and support for image +digests in Linkerd manifests. + +* Added a controlPlaneVersion override to the `linkerd-control-plane` Helm chart + to support including SHA256 image digests in Linkerd manifests (thanks + @cromulentbanana!) ([#11406]; fixes [#11312]) +* Added a `checksum/config` annotation to the destination and proxy injector + deployment manifests, to force restarting those workloads whenever their + webhook secrets change during upgrade (thanks @iAnomaly!) ([#11440]; fixes + [#6940]) +* Updated the Policy controller's OpenSSL dependency to v3, as OpenSSL 1.1.1 is + EOL ([#11625]) +* proxy: Increased `DEFAULT_OUTBOUND_TCP_QUEUE_CAPACITY` to prevent EOF errors + during bursts of TCP connections (proxy PR [#2521][proxy-2521]) + +[#11406]: https://github.com/linkerd/linkerd2/pull/11406 +[#11312]: https://github.com/linkerd/linkerd2/issues/11312 +[#11440]: https://github.com/linkerd/linkerd2/pull/11440 +[#6940]: https://github.com/linkerd/linkerd2/issues/6940 +[#11625]: https://github.com/linkerd/linkerd2/pull/11625 +[proxy-2521]: https://github.com/linkerd/linkerd2-proxy/pull/2521 + ## stable-2.14.4 This stable release improves observability for the control plane by adding diff --git a/charts/linkerd-control-plane/Chart.yaml b/charts/linkerd-control-plane/Chart.yaml index 63cb0e34dd9b4..bf205f0633f7d 100644 --- a/charts/linkerd-control-plane/Chart.yaml +++ b/charts/linkerd-control-plane/Chart.yaml @@ -16,7 +16,7 @@ dependencies: - name: partials version: 0.1.0 repository: file://../partials -version: 1.16.5 +version: 1.16.6 icon: https://linkerd.io/images/logo-only-200h.png maintainers: - name: Linkerd authors diff --git a/charts/linkerd-control-plane/README.md b/charts/linkerd-control-plane/README.md index c9ed0ad53e5cc..5d364aa5e686a 100644 --- a/charts/linkerd-control-plane/README.md +++ b/charts/linkerd-control-plane/README.md @@ -3,7 +3,7 @@ Linkerd gives you observability, reliability, and security for your microservices — with no code change required. -![Version: 1.16.5](https://img.shields.io/badge/Version-1.16.5-informational?style=flat-square) +![Version: 1.16.6](https://img.shields.io/badge/Version-1.16.6-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: edge-XX.X.X](https://img.shields.io/badge/AppVersion-edge--XX.X.X-informational?style=flat-square) diff --git a/cli/cmd/testdata/install_controlplane_tracing_output.golden b/cli/cmd/testdata/install_controlplane_tracing_output.golden index dfe627ae03e5f..dcc271c93505c 100644 --- a/cli/cmd/testdata/install_controlplane_tracing_output.golden +++ b/cli/cmd/testdata/install_controlplane_tracing_output.golden @@ -1204,7 +1204,7 @@ spec: template: metadata: annotations: - checksum/config: 6c6be36634a1edea1ebcad1c3981959c48eb6b78684e7093058a50eca6ba2f97 + checksum/config: 0ce26bbf1882484f5bd5a5c512cd0d9eb981abf22c2a4a71c679b2da1c3581e2 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_custom_domain.golden b/cli/cmd/testdata/install_custom_domain.golden index ed17bf85aa190..537784c42aa3f 100644 --- a/cli/cmd/testdata/install_custom_domain.golden +++ b/cli/cmd/testdata/install_custom_domain.golden @@ -1203,7 +1203,7 @@ spec: template: metadata: annotations: - checksum/config: 6c6be36634a1edea1ebcad1c3981959c48eb6b78684e7093058a50eca6ba2f97 + checksum/config: 0ce26bbf1882484f5bd5a5c512cd0d9eb981abf22c2a4a71c679b2da1c3581e2 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_custom_registry.golden b/cli/cmd/testdata/install_custom_registry.golden index 9c687200a7383..11e1188bb9dad 100644 --- a/cli/cmd/testdata/install_custom_registry.golden +++ b/cli/cmd/testdata/install_custom_registry.golden @@ -1203,7 +1203,7 @@ spec: template: metadata: annotations: - checksum/config: 6c6be36634a1edea1ebcad1c3981959c48eb6b78684e7093058a50eca6ba2f97 + checksum/config: 0ce26bbf1882484f5bd5a5c512cd0d9eb981abf22c2a4a71c679b2da1c3581e2 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_default.golden b/cli/cmd/testdata/install_default.golden index ed17bf85aa190..537784c42aa3f 100644 --- a/cli/cmd/testdata/install_default.golden +++ b/cli/cmd/testdata/install_default.golden @@ -1203,7 +1203,7 @@ spec: template: metadata: annotations: - checksum/config: 6c6be36634a1edea1ebcad1c3981959c48eb6b78684e7093058a50eca6ba2f97 + checksum/config: 0ce26bbf1882484f5bd5a5c512cd0d9eb981abf22c2a4a71c679b2da1c3581e2 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_default_override_dst_get_nets.golden b/cli/cmd/testdata/install_default_override_dst_get_nets.golden index f530bee9bb186..37ad7f7586b41 100644 --- a/cli/cmd/testdata/install_default_override_dst_get_nets.golden +++ b/cli/cmd/testdata/install_default_override_dst_get_nets.golden @@ -1203,7 +1203,7 @@ spec: template: metadata: annotations: - checksum/config: 6c6be36634a1edea1ebcad1c3981959c48eb6b78684e7093058a50eca6ba2f97 + checksum/config: 0ce26bbf1882484f5bd5a5c512cd0d9eb981abf22c2a4a71c679b2da1c3581e2 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_default_token.golden b/cli/cmd/testdata/install_default_token.golden index c6c8b3123c535..2a19e52760861 100644 --- a/cli/cmd/testdata/install_default_token.golden +++ b/cli/cmd/testdata/install_default_token.golden @@ -1194,7 +1194,7 @@ spec: template: metadata: annotations: - checksum/config: 6c6be36634a1edea1ebcad1c3981959c48eb6b78684e7093058a50eca6ba2f97 + checksum/config: 0ce26bbf1882484f5bd5a5c512cd0d9eb981abf22c2a4a71c679b2da1c3581e2 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_ha_output.golden b/cli/cmd/testdata/install_ha_output.golden index 05d6478ee40b0..9cf898cda97e7 100644 --- a/cli/cmd/testdata/install_ha_output.golden +++ b/cli/cmd/testdata/install_ha_output.golden @@ -1301,7 +1301,7 @@ spec: template: metadata: annotations: - checksum/config: d678d93a3ae6be52fc98976b988d287fb3f8bc41d1eb9cc5f06d63fc3a3b9ee7 + checksum/config: d119786757611ae950baf183387a1524cb2dc7e1801ba143a1922ceff51a5871 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_ha_with_overrides_output.golden b/cli/cmd/testdata/install_ha_with_overrides_output.golden index ce799f2a429cb..c05eb35081bc4 100644 --- a/cli/cmd/testdata/install_ha_with_overrides_output.golden +++ b/cli/cmd/testdata/install_ha_with_overrides_output.golden @@ -1301,7 +1301,7 @@ spec: template: metadata: annotations: - checksum/config: d678d93a3ae6be52fc98976b988d287fb3f8bc41d1eb9cc5f06d63fc3a3b9ee7 + checksum/config: d119786757611ae950baf183387a1524cb2dc7e1801ba143a1922ceff51a5871 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_heartbeat_disabled_output.golden b/cli/cmd/testdata/install_heartbeat_disabled_output.golden index 23dd48d88dc2c..21aa3507b5d5e 100644 --- a/cli/cmd/testdata/install_heartbeat_disabled_output.golden +++ b/cli/cmd/testdata/install_heartbeat_disabled_output.golden @@ -1134,7 +1134,7 @@ spec: template: metadata: annotations: - checksum/config: 6c6be36634a1edea1ebcad1c3981959c48eb6b78684e7093058a50eca6ba2f97 + checksum/config: 0ce26bbf1882484f5bd5a5c512cd0d9eb981abf22c2a4a71c679b2da1c3581e2 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_helm_control_plane_output.golden b/cli/cmd/testdata/install_helm_control_plane_output.golden index d61cdec555878..4a42905c97706 100644 --- a/cli/cmd/testdata/install_helm_control_plane_output.golden +++ b/cli/cmd/testdata/install_helm_control_plane_output.golden @@ -1178,7 +1178,7 @@ spec: template: metadata: annotations: - checksum/config: 387ff1ed65e66e400e556c47490d20187adcb885526d44d9f0aa75dc97f23223 + checksum/config: 7d88c801afd5e7c603a056b09b30a0cea50954fbfe95667796f426bfd343dd27 linkerd.io/created-by: linkerd/helm linkerd-version linkerd.io/proxy-version: test-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_helm_control_plane_output_ha.golden b/cli/cmd/testdata/install_helm_control_plane_output_ha.golden index 565f3ed3d1812..2db3b09bf8bd2 100644 --- a/cli/cmd/testdata/install_helm_control_plane_output_ha.golden +++ b/cli/cmd/testdata/install_helm_control_plane_output_ha.golden @@ -1276,7 +1276,7 @@ spec: template: metadata: annotations: - checksum/config: ff01f9fed5a80929d1215ebec514a25888ac7fed762a5a753bd896928e26b951 + checksum/config: cf0b9908676cbbe0e87ef49961bba774c43d032ab897f81c3d551edba63691fc linkerd.io/created-by: linkerd/helm linkerd-version linkerd.io/proxy-version: test-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_helm_output_ha_labels.golden b/cli/cmd/testdata/install_helm_output_ha_labels.golden index 6916b46867ece..3026b523714d1 100644 --- a/cli/cmd/testdata/install_helm_output_ha_labels.golden +++ b/cli/cmd/testdata/install_helm_output_ha_labels.golden @@ -1284,7 +1284,7 @@ spec: template: metadata: annotations: - checksum/config: ff01f9fed5a80929d1215ebec514a25888ac7fed762a5a753bd896928e26b951 + checksum/config: cf0b9908676cbbe0e87ef49961bba774c43d032ab897f81c3d551edba63691fc linkerd.io/created-by: linkerd/helm linkerd-version linkerd.io/proxy-version: test-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_helm_output_ha_namespace_selector.golden b/cli/cmd/testdata/install_helm_output_ha_namespace_selector.golden index 9049d38db6df1..2410ab39dbc7d 100644 --- a/cli/cmd/testdata/install_helm_output_ha_namespace_selector.golden +++ b/cli/cmd/testdata/install_helm_output_ha_namespace_selector.golden @@ -1266,7 +1266,7 @@ spec: template: metadata: annotations: - checksum/config: cf05a64f720a18752cb8e0e759cb4cd6e22602eb0129a2144a2093ac6ea87659 + checksum/config: 1274bd650366a45f67115851a3c9b562229a3fd00901968ecfab8960340e7b64 linkerd.io/created-by: linkerd/helm linkerd-version linkerd.io/proxy-version: test-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_no_init_container.golden b/cli/cmd/testdata/install_no_init_container.golden index 51167cb9141fa..d40ac6048a9ab 100644 --- a/cli/cmd/testdata/install_no_init_container.golden +++ b/cli/cmd/testdata/install_no_init_container.golden @@ -1197,7 +1197,7 @@ spec: template: metadata: annotations: - checksum/config: 6c6be36634a1edea1ebcad1c3981959c48eb6b78684e7093058a50eca6ba2f97 + checksum/config: 0ce26bbf1882484f5bd5a5c512cd0d9eb981abf22c2a4a71c679b2da1c3581e2 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_output.golden b/cli/cmd/testdata/install_output.golden index 77c854f130127..0e054d878afa7 100644 --- a/cli/cmd/testdata/install_output.golden +++ b/cli/cmd/testdata/install_output.golden @@ -1176,7 +1176,7 @@ spec: template: metadata: annotations: - checksum/config: d3eac3abc6cf5f1943e0f005fd15ad0107229283fa6f8db72f9ccb4766bb2228 + checksum/config: 5cef8a8a5455d00fd5703f7c087d008783e8fcbc5d367d3437e2f9689fd7d902 linkerd.io/created-by: CliVersion linkerd.io/proxy-version: ProxyVersion cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_proxy_ignores.golden b/cli/cmd/testdata/install_proxy_ignores.golden index 40794ead0c409..a966c4cc1ce60 100644 --- a/cli/cmd/testdata/install_proxy_ignores.golden +++ b/cli/cmd/testdata/install_proxy_ignores.golden @@ -1203,7 +1203,7 @@ spec: template: metadata: annotations: - checksum/config: 6c6be36634a1edea1ebcad1c3981959c48eb6b78684e7093058a50eca6ba2f97 + checksum/config: 0ce26bbf1882484f5bd5a5c512cd0d9eb981abf22c2a4a71c679b2da1c3581e2 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/cli/cmd/testdata/install_values_file.golden b/cli/cmd/testdata/install_values_file.golden index 9702ecdda73db..c6b738bb2e8fe 100644 --- a/cli/cmd/testdata/install_values_file.golden +++ b/cli/cmd/testdata/install_values_file.golden @@ -1203,7 +1203,7 @@ spec: template: metadata: annotations: - checksum/config: 6c6be36634a1edea1ebcad1c3981959c48eb6b78684e7093058a50eca6ba2f97 + checksum/config: 0ce26bbf1882484f5bd5a5c512cd0d9eb981abf22c2a4a71c679b2da1c3581e2 linkerd.io/created-by: linkerd/cli dev-undefined linkerd.io/proxy-version: install-proxy-version cluster-autoscaler.kubernetes.io/safe-to-evict: "true" diff --git a/jaeger/charts/linkerd-jaeger/Chart.yaml b/jaeger/charts/linkerd-jaeger/Chart.yaml index 3321edba93ca9..5dd9dd4b15165 100644 --- a/jaeger/charts/linkerd-jaeger/Chart.yaml +++ b/jaeger/charts/linkerd-jaeger/Chart.yaml @@ -11,7 +11,7 @@ kubeVersion: ">=1.21.0-0" name: linkerd-jaeger sources: - https://github.com/linkerd/linkerd2/ -version: 30.12.5 +version: 30.12.6 icon: https://linkerd.io/images/logo-only-200h.png maintainers: - name: Linkerd authors diff --git a/jaeger/charts/linkerd-jaeger/README.md b/jaeger/charts/linkerd-jaeger/README.md index 4708ba9721cc8..7cc497502e382 100644 --- a/jaeger/charts/linkerd-jaeger/README.md +++ b/jaeger/charts/linkerd-jaeger/README.md @@ -3,7 +3,7 @@ The Linkerd-Jaeger extension adds distributed tracing to Linkerd using OpenCensus and Jaeger. -![Version: 30.12.5](https://img.shields.io/badge/Version-30.12.5-informational?style=flat-square) +![Version: 30.12.6](https://img.shields.io/badge/Version-30.12.6-informational?style=flat-square) ![AppVersion: edge-XX.X.X](https://img.shields.io/badge/AppVersion-edge--XX.X.X-informational?style=flat-square) diff --git a/multicluster/charts/linkerd-multicluster/Chart.yaml b/multicluster/charts/linkerd-multicluster/Chart.yaml index b7bf4ec096c43..fe1b884433d7a 100644 --- a/multicluster/charts/linkerd-multicluster/Chart.yaml +++ b/multicluster/charts/linkerd-multicluster/Chart.yaml @@ -11,7 +11,7 @@ kubeVersion: ">=1.21.0-0" name: "linkerd-multicluster" sources: - https://github.com/linkerd/linkerd2/ -version: 30.11.5 +version: 30.11.6 icon: https://linkerd.io/images/logo-only-200h.png maintainers: - name: Linkerd authors diff --git a/multicluster/charts/linkerd-multicluster/README.md b/multicluster/charts/linkerd-multicluster/README.md index db067e8aa1886..009c8de587211 100644 --- a/multicluster/charts/linkerd-multicluster/README.md +++ b/multicluster/charts/linkerd-multicluster/README.md @@ -3,7 +3,7 @@ The Linkerd-Multicluster extension contains resources to support multicluster linking to remote clusters -![Version: 30.11.5](https://img.shields.io/badge/Version-30.11.5-informational?style=flat-square) +![Version: 30.11.6](https://img.shields.io/badge/Version-30.11.6-informational?style=flat-square) ![AppVersion: edge-XX.X.X](https://img.shields.io/badge/AppVersion-edge--XX.X.X-informational?style=flat-square) diff --git a/viz/charts/linkerd-viz/Chart.yaml b/viz/charts/linkerd-viz/Chart.yaml index 2f36c2dbc1536..b49495ff9d270 100644 --- a/viz/charts/linkerd-viz/Chart.yaml +++ b/viz/charts/linkerd-viz/Chart.yaml @@ -11,7 +11,7 @@ kubeVersion: ">=1.21.0-0" name: "linkerd-viz" sources: - https://github.com/linkerd/linkerd2/ -version: 30.12.5 +version: 30.12.6 icon: https://linkerd.io/images/logo-only-200h.png maintainers: - name: Linkerd authors diff --git a/viz/charts/linkerd-viz/README.md b/viz/charts/linkerd-viz/README.md index 8548f0df6835a..d5acf8e8841b1 100644 --- a/viz/charts/linkerd-viz/README.md +++ b/viz/charts/linkerd-viz/README.md @@ -3,7 +3,7 @@ The Linkerd-Viz extension contains observability and visualization components for Linkerd. -![Version: 30.12.5](https://img.shields.io/badge/Version-30.12.5-informational?style=flat-square) +![Version: 30.12.6](https://img.shields.io/badge/Version-30.12.6-informational?style=flat-square) ![AppVersion: edge-XX.X.X](https://img.shields.io/badge/AppVersion-edge--XX.X.X-informational?style=flat-square)