linkerd/linkerd2 stable-2.12.3

on GitHub

stable-2.12.3

This stable release is packed with various fixes in both the core linkerd
controllers and extensions.

• CLI

  • Fixed linkerd check failing when the cluster had services of type
    ExternalName
  • Fixed linkerd multicluster install not honoring the gateway.UID setting
  • Fixed flag linkerd upgrade --from-manifests

• Destination Controller

  • Fixed race condition in destination controller
  • Fixed issue in the destination controller where hostPort mappings were
    being ignored

• linkerd-proxy-init

  • Set the noop init container user to be the same as proxy-init's to avoid
    errors when the security context disallows running as root
  • Introduced proxyInit.privileged setting to allow running
    linkerd-proxy-init without restrictions when required
  • Added port 6443 to default skipped ports to bypass proxy when ebpf CNIs
    override the API Server packet destination

• Extensions

  • Removed unnecessary proxyProtocol restriction in the multicluster gateway
    Server (thanks @psmit!)
  • Added "Exists" toleration to the linkerd-cni DaemonSet to have it
    installed by default in tainted nodes
  • Make dashboard loading more robust when in the presence of browser plugins
    injecting script tags (thanks @junnplus!)