Linkerd - stable-2.13.6

Security

stable-2.13.6

This stable release fixes a regression introduced in stable-2.13.0 which
resulted in proxies shedding load too aggressively while under moderate request
load to a single service (#11055). In addition, it updates the base image for
the linkerd-cni initcontainer to resolve a CVE in libdb (#11196), fixes a
race condition in the Destination controller that could cause it to crash
(#11163), as well as fixing a number of other issues.

  • Control Plane
  • Fixed a race condition in the destination controller that could cause it to
    panic (#11169; fixes #11163)
  • Improved the granularity of logging levels in the control plane (#11147)

  • Proxy

  • Changed the default HTTP request queue capacities for the inbound and
    outbound proxies back to 10,000 requests (#11198; fixes #11055)

  • CLI

  • Updated extension CLI commands to prefer the --registry flag over the
    LINKERD_DOCKER_REGISTRY environment variable, making the precedence more
    consistent (thanks @harsh020!) (see #11144)

  • CNI

  • Updated linkerd-cni base image to resolve CVE-2019-8457 in libdb
    (#11196)
  • Changed the CNI plugin installer to always run in 'chained' mode; the plugin
    will now wait until another CNI plugin is installed before appending its
    configuration (#10849)
  • Removed hostNetwork: true from linkerd-cni Helm chart templates
    (#11158; fixes #11141) (thanks @abhijeetgauravm!)

  • Multicluster

  • Fixed the linkerd multicluster check command failing in the presence of
    lots of mirrored services (#10764)

Details

date
Aug. 10, 2023, 12:57 a.m.
name
stable-2.13.6
type
Patch
👇
Register or login to:
  • 🔍View and search all Linkerd releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or