Skip to content

Conversation

@GTRekter
Copy link

@GTRekter GTRekter commented Oct 24, 2025

Subject: Local Service Mirror in HA mode

Problem: In HA mode, the HA Helm values do not override .Values.localServiceMirror.replicas, which defaults to 1.

Note: The template already sets enablePodAntiAffinity: true, which will automatically create a PodDisruptionBudget and apply the anti-affinity rules.

Solution: Set .Values.localServiceMirror.replicas to 3, matching the Linkerd control plane’s HA settings.

Validation: The following command:

helm upgrade --install multicluster linkerd-buoyant/linkerd-enterprise-multicluster --version 2.18.3 --namespace linkerd-multicluster --create-namespace --set=localServiceMirror.replicas=3 --set=gateway.enabled=true --set=controllers[0].link.ref.name=k3d-01 --set=controllers[1].link.ref.name=k3d-02 

produces the expected result:

kubectl get pods -A
NAMESPACE              NAME                                            READY   STATUS    RESTARTS   AGE
linkerd-multicluster   controller-k3d-01-68cf8f69b8-tgsdb              2/2     Running   0          50s
linkerd-multicluster   controller-k3d-02-d7c58f459-4xstn               2/2     Running   0          50s
linkerd-multicluster   linkerd-gateway-55bc8c7df6-gm4n4                2/2     Running   0          50s
linkerd-multicluster   linkerd-local-service-mirror-7467b486bd-2k2jl   2/2     Running   0          50s
linkerd-multicluster   linkerd-local-service-mirror-7467b486bd-cszrj   2/2     Running   0          50s
linkerd-multicluster   linkerd-local-service-mirror-7467b486bd-tdtrw   2/2     Running   0          50s
...

This confirms the localServiceMirror is running with three replicas as configured.

@GTRekter GTRekter requested a review from a team as a code owner October 24, 2025 09:28
@GTRekter GTRekter force-pushed the ivanp/multicluster-localsm-rep-ha branch from 6fd3e12 to 607fe4c Compare October 24, 2025 09:34
Copy link
Member

@adleong adleong left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hey @GTRekter! I think CI got stuck on this PR for some reason. If you could merge main, fix the missing newline at the end of values-ha.yaml, that should trigger CI to try again.

GTRekter and others added 27 commits December 18, 2025 20:02
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [cfg-if](https://github.com/rust-lang/cfg-if) from 1.0.3 to 1.0.4.
- [Release notes](https://github.com/rust-lang/cfg-if/releases)
- [Changelog](https://github.com/rust-lang/cfg-if/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cfg-if@v1.0.3...v1.0.4)

---
updated-dependencies:
- dependency-name: cfg-if
  dependency-version: 1.0.4
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [openssl-sys](https://github.com/rust-openssl/rust-openssl) from 0.9.109 to 0.9.110.
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-sys-v0.9.109...openssl-sys-v0.9.110)

---
updated-dependencies:
- dependency-name: openssl-sys
  dependency-version: 0.9.110
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [unicode-ident](https://github.com/dtolnay/unicode-ident) from 1.0.19 to 1.0.20.
- [Release notes](https://github.com/dtolnay/unicode-ident/releases)
- [Commits](dtolnay/unicode-ident@1.0.19...1.0.20)

---
updated-dependencies:
- dependency-name: unicode-ident
  dependency-version: 1.0.20
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [backon](https://github.com/Xuanwo/backon) from 1.5.2 to 1.6.0.
- [Release notes](https://github.com/Xuanwo/backon/releases)
- [Commits](Xuanwo/backon@v1.5.2...v1.6.0)

---
updated-dependencies:
- dependency-name: backon
  dependency-version: 1.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser) from 7.28.4 to 7.28.5.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/eslint/babel-eslint-parser)

---
updated-dependencies:
- dependency-name: "@babel/eslint-parser"
  dependency-version: 7.28.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.28.3 to 7.28.5.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-preset-env)

---
updated-dependencies:
- dependency-name: "@babel/preset-env"
  dependency-version: 7.28.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from d03a93c0dbfac6d6dd6a0d8a5e7daff992b07449 to dbf178ceecb9304128c8e0648591d71208c6e2c9.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@d03a93c...dbf178c)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: dbf178ceecb9304128c8e0648591d71208c6e2c9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…d#14663)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 5.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@ea165f8...330a01c)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@634f93c...018cc2c)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…erd#14665)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@634f93c...018cc2c)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) from 7.27.1 to 7.28.5.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-preset-react)

---
updated-dependencies:
- dependency-name: "@babel/preset-react"
  dependency-version: 7.28.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…inkerd#14661)

Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.28.4 to 7.28.5.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.28.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
helm is already present in the github runner base image.

Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Release notes: https://github.com/linkerd/linkerd2-proxy/releases/tag/release/v2.326.0

Signed-off-by: l5d-bot <l5d-bot@users.noreply.github.com>
Co-authored-by: l5d-bot <l5d-bot@users.noreply.github.com>
Co-authored-by: Scott Fleener <scott@buoyant.io>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [rustls](https://github.com/rustls/rustls) from 0.23.33 to 0.23.34.
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.33...v/0.23.34)

---
updated-dependencies:
- dependency-name: rustls
  dependency-version: 0.23.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Release notes: https://github.com/linkerd/linkerd2-proxy/releases/tag/release/v2.327.0

Signed-off-by: l5d-bot <l5d-bot@users.noreply.github.com>
Co-authored-by: l5d-bot <l5d-bot@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [openssl](https://github.com/rust-openssl/rust-openssl) from 0.10.73 to 0.10.74.
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.73...openssl-v0.10.74)

---
updated-dependencies:
- dependency-name: openssl
  dependency-version: 0.10.74
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
The `linkerd-podinfo` volume wasn't being added to injected pods, thus forbidding traces to expose the pod's metadata.

The cause was that the linkerd-control-plane `values.yaml` file declared the entry `proxy.tracing.enabled` whereas the templates were using `proxy.tracing.enable`.

Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
The destination controller has a gauge metric called workload_subscribers which tracks the number of subscribers to an endpoint profile. However, since we have dropped all labels from this metric due to high cardinality, we are now re-using the same gauge for all ip:port publishers. This means that each time we set the gauge value, it overrides the previous value and only tracks the number of subscribers to the most recently subscribed ip:port combination.

We move this logic up so that the workload_subscribers gauge instead tracks the total number of subscribers across all ip:port publishers.

Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…inkerd#14666)

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.67.1 to 0.67.2.
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.67.1...v0.67.2)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.67.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps the clap group with 2 updates: [clap](https://github.com/clap-rs/clap) and [clap_builder](https://github.com/clap-rs/clap).

Updates `clap` from 4.5.50 to 4.5.51
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.50...clap_complete-v4.5.51)

Updates `clap_builder` from 4.5.50 to 4.5.51
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.5.50...v4.5.51)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: clap
- dependency-name: clap_builder
  dependency-version: 4.5.51
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: clap
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [rustls-pki-types](https://github.com/rustls/pki-types) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/rustls/pki-types/releases)
- [Commits](rustls/pki-types@v/1.12.0...v/1.13.0)

---
updated-dependencies:
- dependency-name: rustls-pki-types
  dependency-version: 1.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [home](https://github.com/rust-lang/cargo) from 0.5.11 to 0.5.12.
- [Changelog](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md)
- [Commits](rust-lang/cargo@home-0.5.11...home-0.5.12)

---
updated-dependencies:
- dependency-name: home
  dependency-version: 0.5.12
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from dbf178ceecb9304128c8e0648591d71208c6e2c9 to 70069877f29101175ed2b055d210fe8b1d54d7d7.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@dbf178c...7006987)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: 70069877f29101175ed2b055d210fe8b1d54d7d7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [aho-corasick](https://github.com/BurntSushi/aho-corasick) from 1.1.3 to 1.1.4.
- [Commits](BurntSushi/aho-corasick@1.1.3...1.1.4)

---
updated-dependencies:
- dependency-name: aho-corasick
  dependency-version: 1.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
dependabot bot and others added 27 commits December 18, 2025 20:03
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 2d752abc95ba0255af33a2b4d5de03df3954cdf2 to abdd2f68ea150cee8f236d4a9fb4e0f2491abf1b.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@2d752ab...abdd2f6)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: abdd2f68ea150cee8f236d4a9fb4e0f2491abf1b
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
)

Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.8.1 to 2.8.2.
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](Swatinem/rust-cache@f13886b...779680d)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…hz` (linkerd#14780)

(Extracted from linkerd#14566)

The logic behind the `linkerd authz` command wasn't accounting for ports
in init containers, so authorization policies pointing to those ports
were not reported by the command.

Say for example you had a strict auth policy for the `linkerd-admin`
port, allowing only access from prometheus. For emojivoto's web workload
you could set that up like this:

```yaml
apiVersion: policy.linkerd.io/v1beta3
kind: Server
metadata:
  annotations:
  name: admin
  namespace: emojivoto
spec:
  accessPolicy: deny
  podSelector:
    matchLabels:
      app: web-svc
  port: linkerd-admin
  proxyProtocol: HTTP/1
---
apiVersion: policy.linkerd.io/v1alpha1
kind: MeshTLSAuthentication
metadata:
  namespace: emojivoto
  name: prometheus
spec:
  identities:
  - "prometheus.linkerd-viz.serviceaccount.identity.linkerd.cluster.local"
---
apiVersion: policy.linkerd.io/v1alpha1
kind: AuthorizationPolicy
metadata:
  namespace: emojivoto
  name: web-http-sa
spec:
  targetRef:
    group: policy.linkerd.io
    kind: Server
    name: admin
  requiredAuthenticationRefs:
    - name: prometheus
      kind: MeshTLSAuthentication
      group: policy.linkerd.io
```

Invoking `linkerd authz` would return nothing, but after this change we
can see the auth:

```
$ linkerd authz -n emojivoto deploy/web
ROUTE   SERVER  AUTHORIZATION_POLICY   SERVER_AUTHORIZATION
*       admin   web-http-sa
```

Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…ck --proxy` (linkerd#14779)

(Extracted from linkerd#14566)

The "opaque ports are properly annotated" check had a bug where it only
validated regular containers, missing ports in init containers (native
sidecars). This meant mismatched annotations between pods and services
could go undetected when the port belonged to an init container.

When a service had the opaque-ports annotation but the corresponding pod
did not, the check would incorrectly pass if the port was defined in an
init container instead of a regular container.

This commit extends the check to validate ports in both regular containers
and init containers, ensuring consistent opaque-ports annotations across
pods and services regardless of where the port is defined.

Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…4767)

(Extracted from linkerd#14566)

This improves the injector logic by accounting for ports exposed in native sidecar containers:

- when consuming the `config.linkerd.io/opaque-ports` annotations
  pointing to (named or integer) ports in init containers
- when populating the proxy's `LINKERD2_PROXY_INBOUND_PORTS` env var

The `webhook_tests.go` have been expanded to test injection to a pod
with a memcached native sidecar container (never mind the contrivedness
of the example).

Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [syn](https://github.com/dtolnay/syn) from 2.0.110 to 2.0.111.
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.110...2.0.111)

---
updated-dependencies:
- dependency-name: syn
  dependency-version: 2.0.111
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…kerd#14786)

Those types of ports were getting ignored in `getProfile` responses. A
new test case was added that clarifies an example, that wouldn't pass
before this fix.

(Extracted from linkerd#14566)

Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…4790)

Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.39.0 to 0.40.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.39.0...v0.40.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…inkerd#14789)

Bumps [github.com/go-openapi/spec](https://github.com/go-openapi/spec) from 0.22.1 to 0.22.2.
- [Release notes](https://github.com/go-openapi/spec/releases)
- [Commits](go-openapi/spec@v0.22.1...v0.22.2)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/spec
  dependency-version: 0.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Release notes: https://github.com/linkerd/linkerd2-proxy/releases/tag/release/v2.333.0

Signed-off-by: l5d-bot <l5d-bot@users.noreply.github.com>
Co-authored-by: l5d-bot <l5d-bot@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…22.0.0 (linkerd#14794)

* build(deps): bump DavidAnson/markdownlint-cli2-action

Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 21.0.0 to 22.0.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](DavidAnson/markdownlint-cli2-action@30a0e04...07035fd)

---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
  dependency-version: 22.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: wrap long lines

Signed-off-by: katelyn martin <kate@buoyant.io>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: katelyn martin <kate@buoyant.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: katelyn martin <kate@buoyant.io>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…#14795)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.1 to 5.5.2.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@5a10915...671740a)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@018cc2c...37930b1)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…4808)

Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 5.0.1 to 6.0.0.
- [Release notes](https://github.com/dessant/lock-threads/releases)
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md)
- [Commits](dessant/lock-threads@1bf7ec2...7266a7c)

---
updated-dependencies:
- dependency-name: dessant/lock-threads
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…inkerd#14805)

Bumps google.golang.org/protobuf from 1.36.10 to 1.36.11.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [tokio-metrics](https://github.com/tokio-rs/tokio-metrics) from 0.4.5 to 0.4.6.
- [Release notes](https://github.com/tokio-rs/tokio-metrics/releases)
- [Changelog](https://github.com/tokio-rs/tokio-metrics/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/tokio-metrics/commits)

---
updated-dependencies:
- dependency-name: tokio-metrics
  dependency-version: 0.4.6
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…erd#14807)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@018cc2c...37930b1)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…d#14806)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@330a01c...b7c566a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.19.2 to 3.19.4.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.19.2...v3.19.4)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.19.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
)

Bumps [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) from 5.0.1 to 5.1.0.
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v5.0.1...v5.1.0)

---
updated-dependencies:
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from abdd2f68ea150cee8f236d4a9fb4e0f2491abf1b to e0021407031f5be11a464abee9a0776171c79891.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@abdd2f6...e002140)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: e0021407031f5be11a464abee9a0776171c79891
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [indexmap](https://github.com/indexmap-rs/indexmap) from 2.12.0 to 2.12.1.
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md)
- [Commits](indexmap-rs/indexmap@2.12.0...2.12.1)

---
updated-dependencies:
- dependency-name: indexmap
  dependency-version: 2.12.1
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…etProfile (linkerd#14791)

(Extracted from linkerd#14566)

When hitting pods directly at their their IPs, ports in native sidecars
that were marked as opaque via the `config.linkerd.io/opaque-ports`
annotation, weren't really being marked as opaque.

More concretely, the issue layed in the getProfile API, that was
forgoing init containers when iterating over containers in this
particular case.

Endpoint profile translator tests got expanded, testing for opaque ports
in both init and regular containers.

Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps the kube group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.34.2` | `0.34.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.2` | `0.34.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.34.2` | `0.34.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.2` | `0.34.3` |
| [k8s.io/code-generator](https://github.com/kubernetes/code-generator) | `0.34.2` | `0.34.3` |
| [k8s.io/endpointslice](https://github.com/kubernetes/endpointslice) | `0.34.2` | `0.34.3` |
| [k8s.io/kube-aggregator](https://github.com/kubernetes/kube-aggregator) | `0.34.2` | `0.34.3` |

Updates `k8s.io/api` from 0.34.2 to 0.34.3
- [Commits](kubernetes/api@v0.34.2...v0.34.3)

Updates `k8s.io/apiextensions-apiserver` from 0.34.2 to 0.34.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.34.2...v0.34.3)

Updates `k8s.io/apimachinery` from 0.34.2 to 0.34.3
- [Commits](kubernetes/apimachinery@v0.34.2...v0.34.3)

Updates `k8s.io/client-go` from 0.34.2 to 0.34.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.2...v0.34.3)

Updates `k8s.io/code-generator` from 0.34.2 to 0.34.3
- [Commits](kubernetes/code-generator@v0.34.2...v0.34.3)

Updates `k8s.io/endpointslice` from 0.34.2 to 0.34.3
- [Commits](kubernetes/endpointslice@v0.34.2...v0.34.3)

Updates `k8s.io/kube-aggregator` from 0.34.2 to 0.34.3
- [Commits](kubernetes/kube-aggregator@v0.34.2...v0.34.3)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kube
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kube
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kube
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kube
- dependency-name: k8s.io/code-generator
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kube
- dependency-name: k8s.io/endpointslice
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kube
- dependency-name: k8s.io/kube-aggregator
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kube
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [rustls-pki-types](https://github.com/rustls/pki-types) from 1.13.0 to 1.13.1.
- [Release notes](https://github.com/rustls/pki-types/releases)
- [Commits](rustls/pki-types@v/1.13.0...v/1.13.1)

---
updated-dependencies:
- dependency-name: rustls-pki-types
  dependency-version: 1.13.1
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [socket2](https://github.com/rust-lang/socket2) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/rust-lang/socket2/releases)
- [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md)
- [Commits](rust-lang/socket2@v0.6.0...v0.6.1)

---
updated-dependencies:
- dependency-name: socket2
  dependency-version: 0.6.1
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [hostname](https://github.com/djc/hostname) from 0.4.1 to 0.4.2.
- [Release notes](https://github.com/djc/hostname/releases)
- [Commits](djc/hostname@v0.4.1...v0.4.2)

---
updated-dependencies:
- dependency-name: hostname
  dependency-version: 0.4.2
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
@GTRekter GTRekter force-pushed the ivanp/multicluster-localsm-rep-ha branch from 19e9e8a to 7889cff Compare December 18, 2025 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

10 participants