-
Notifications
You must be signed in to change notification settings - Fork 1.3k
se the default number of replicas of the local service mirror in HA to 3 #14657
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
GTRekter
wants to merge
124
commits into
linkerd:main
Choose a base branch
from
GTRekter:ivanp/multicluster-localsm-rep-ha
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
se the default number of replicas of the local service mirror in HA to 3 #14657
GTRekter
wants to merge
124
commits into
linkerd:main
from
GTRekter:ivanp/multicluster-localsm-rep-ha
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
6fd3e12 to
607fe4c
Compare
adleong
reviewed
Dec 16, 2025
Member
adleong
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
hey @GTRekter! I think CI got stuck on this PR for some reason. If you could merge main, fix the missing newline at the end of values-ha.yaml, that should trigger CI to try again.
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [cfg-if](https://github.com/rust-lang/cfg-if) from 1.0.3 to 1.0.4. - [Release notes](https://github.com/rust-lang/cfg-if/releases) - [Changelog](https://github.com/rust-lang/cfg-if/blob/main/CHANGELOG.md) - [Commits](rust-lang/cfg-if@v1.0.3...v1.0.4) --- updated-dependencies: - dependency-name: cfg-if dependency-version: 1.0.4 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [openssl-sys](https://github.com/rust-openssl/rust-openssl) from 0.9.109 to 0.9.110. - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-sys-v0.9.109...openssl-sys-v0.9.110) --- updated-dependencies: - dependency-name: openssl-sys dependency-version: 0.9.110 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [unicode-ident](https://github.com/dtolnay/unicode-ident) from 1.0.19 to 1.0.20. - [Release notes](https://github.com/dtolnay/unicode-ident/releases) - [Commits](dtolnay/unicode-ident@1.0.19...1.0.20) --- updated-dependencies: - dependency-name: unicode-ident dependency-version: 1.0.20 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [backon](https://github.com/Xuanwo/backon) from 1.5.2 to 1.6.0. - [Release notes](https://github.com/Xuanwo/backon/releases) - [Commits](Xuanwo/backon@v1.5.2...v1.6.0) --- updated-dependencies: - dependency-name: backon dependency-version: 1.6.0 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser) from 7.28.4 to 7.28.5. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/eslint/babel-eslint-parser) --- updated-dependencies: - dependency-name: "@babel/eslint-parser" dependency-version: 7.28.5 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.28.3 to 7.28.5. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-preset-env) --- updated-dependencies: - dependency-name: "@babel/preset-env" dependency-version: 7.28.5 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from d03a93c0dbfac6d6dd6a0d8a5e7daff992b07449 to dbf178ceecb9304128c8e0648591d71208c6e2c9. - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@d03a93c...dbf178c) --- updated-dependencies: - dependency-name: tj-actions/changed-files dependency-version: dbf178ceecb9304128c8e0648591d71208c6e2c9 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…d#14663) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 5.0.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...330a01c) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@634f93c...018cc2c) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…erd#14665) Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@634f93c...018cc2c) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) from 7.27.1 to 7.28.5. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-preset-react) --- updated-dependencies: - dependency-name: "@babel/preset-react" dependency-version: 7.28.5 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…inkerd#14661) Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.28.4 to 7.28.5. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-core) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 7.28.5 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
helm is already present in the github runner base image. Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Release notes: https://github.com/linkerd/linkerd2-proxy/releases/tag/release/v2.326.0 Signed-off-by: l5d-bot <l5d-bot@users.noreply.github.com> Co-authored-by: l5d-bot <l5d-bot@users.noreply.github.com> Co-authored-by: Scott Fleener <scott@buoyant.io> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [rustls](https://github.com/rustls/rustls) from 0.23.33 to 0.23.34. - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.33...v/0.23.34) --- updated-dependencies: - dependency-name: rustls dependency-version: 0.23.34 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Release notes: https://github.com/linkerd/linkerd2-proxy/releases/tag/release/v2.327.0 Signed-off-by: l5d-bot <l5d-bot@users.noreply.github.com> Co-authored-by: l5d-bot <l5d-bot@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [openssl](https://github.com/rust-openssl/rust-openssl) from 0.10.73 to 0.10.74. - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.73...openssl-v0.10.74) --- updated-dependencies: - dependency-name: openssl dependency-version: 0.10.74 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
The `linkerd-podinfo` volume wasn't being added to injected pods, thus forbidding traces to expose the pod's metadata. The cause was that the linkerd-control-plane `values.yaml` file declared the entry `proxy.tracing.enabled` whereas the templates were using `proxy.tracing.enable`. Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
The destination controller has a gauge metric called workload_subscribers which tracks the number of subscribers to an endpoint profile. However, since we have dropped all labels from this metric due to high cardinality, we are now re-using the same gauge for all ip:port publishers. This means that each time we set the gauge value, it overrides the previous value and only tracks the number of subscribers to the most recently subscribed ip:port combination. We move this logic up so that the workload_subscribers gauge instead tracks the total number of subscribers across all ip:port publishers. Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…inkerd#14666) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.67.1 to 0.67.2. - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.67.1...v0.67.2) --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-version: 0.67.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps the clap group with 2 updates: [clap](https://github.com/clap-rs/clap) and [clap_builder](https://github.com/clap-rs/clap). Updates `clap` from 4.5.50 to 4.5.51 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.50...clap_complete-v4.5.51) Updates `clap_builder` from 4.5.50 to 4.5.51 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@v4.5.50...v4.5.51) --- updated-dependencies: - dependency-name: clap dependency-version: 4.5.51 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: clap - dependency-name: clap_builder dependency-version: 4.5.51 dependency-type: indirect update-type: version-update:semver-patch dependency-group: clap ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [rustls-pki-types](https://github.com/rustls/pki-types) from 1.12.0 to 1.13.0. - [Release notes](https://github.com/rustls/pki-types/releases) - [Commits](rustls/pki-types@v/1.12.0...v/1.13.0) --- updated-dependencies: - dependency-name: rustls-pki-types dependency-version: 1.13.0 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [home](https://github.com/rust-lang/cargo) from 0.5.11 to 0.5.12. - [Changelog](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md) - [Commits](rust-lang/cargo@home-0.5.11...home-0.5.12) --- updated-dependencies: - dependency-name: home dependency-version: 0.5.12 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from dbf178ceecb9304128c8e0648591d71208c6e2c9 to 70069877f29101175ed2b055d210fe8b1d54d7d7. - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@dbf178c...7006987) --- updated-dependencies: - dependency-name: tj-actions/changed-files dependency-version: 70069877f29101175ed2b055d210fe8b1d54d7d7 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [aho-corasick](https://github.com/BurntSushi/aho-corasick) from 1.1.3 to 1.1.4. - [Commits](BurntSushi/aho-corasick@1.1.3...1.1.4) --- updated-dependencies: - dependency-name: aho-corasick dependency-version: 1.1.4 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 2d752abc95ba0255af33a2b4d5de03df3954cdf2 to abdd2f68ea150cee8f236d4a9fb4e0f2491abf1b. - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@2d752ab...abdd2f6) --- updated-dependencies: - dependency-name: tj-actions/changed-files dependency-version: abdd2f68ea150cee8f236d4a9fb4e0f2491abf1b dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
) Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.8.1 to 2.8.2. - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](Swatinem/rust-cache@f13886b...779680d) --- updated-dependencies: - dependency-name: Swatinem/rust-cache dependency-version: 2.8.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…hz` (linkerd#14780) (Extracted from linkerd#14566) The logic behind the `linkerd authz` command wasn't accounting for ports in init containers, so authorization policies pointing to those ports were not reported by the command. Say for example you had a strict auth policy for the `linkerd-admin` port, allowing only access from prometheus. For emojivoto's web workload you could set that up like this: ```yaml apiVersion: policy.linkerd.io/v1beta3 kind: Server metadata: annotations: name: admin namespace: emojivoto spec: accessPolicy: deny podSelector: matchLabels: app: web-svc port: linkerd-admin proxyProtocol: HTTP/1 --- apiVersion: policy.linkerd.io/v1alpha1 kind: MeshTLSAuthentication metadata: namespace: emojivoto name: prometheus spec: identities: - "prometheus.linkerd-viz.serviceaccount.identity.linkerd.cluster.local" --- apiVersion: policy.linkerd.io/v1alpha1 kind: AuthorizationPolicy metadata: namespace: emojivoto name: web-http-sa spec: targetRef: group: policy.linkerd.io kind: Server name: admin requiredAuthenticationRefs: - name: prometheus kind: MeshTLSAuthentication group: policy.linkerd.io ``` Invoking `linkerd authz` would return nothing, but after this change we can see the auth: ``` $ linkerd authz -n emojivoto deploy/web ROUTE SERVER AUTHORIZATION_POLICY SERVER_AUTHORIZATION * admin web-http-sa ``` Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…ck --proxy` (linkerd#14779) (Extracted from linkerd#14566) The "opaque ports are properly annotated" check had a bug where it only validated regular containers, missing ports in init containers (native sidecars). This meant mismatched annotations between pods and services could go undetected when the port belonged to an init container. When a service had the opaque-ports annotation but the corresponding pod did not, the check would incorrectly pass if the port was defined in an init container instead of a regular container. This commit extends the check to validate ports in both regular containers and init containers, ensuring consistent opaque-ports annotations across pods and services regardless of where the port is defined. Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…4767) (Extracted from linkerd#14566) This improves the injector logic by accounting for ports exposed in native sidecar containers: - when consuming the `config.linkerd.io/opaque-ports` annotations pointing to (named or integer) ports in init containers - when populating the proxy's `LINKERD2_PROXY_INBOUND_PORTS` env var The `webhook_tests.go` have been expanded to test injection to a pod with a memcached native sidecar container (never mind the contrivedness of the example). Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [syn](https://github.com/dtolnay/syn) from 2.0.110 to 2.0.111. - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@2.0.110...2.0.111) --- updated-dependencies: - dependency-name: syn dependency-version: 2.0.111 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…kerd#14786) Those types of ports were getting ignored in `getProfile` responses. A new test case was added that clarifies an example, that wouldn't pass before this fix. (Extracted from linkerd#14566) Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…4790) Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.39.0 to 0.40.0. - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.39.0...v0.40.0) --- updated-dependencies: - dependency-name: golang.org/x/tools dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…inkerd#14789) Bumps [github.com/go-openapi/spec](https://github.com/go-openapi/spec) from 0.22.1 to 0.22.2. - [Release notes](https://github.com/go-openapi/spec/releases) - [Commits](go-openapi/spec@v0.22.1...v0.22.2) --- updated-dependencies: - dependency-name: github.com/go-openapi/spec dependency-version: 0.22.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Release notes: https://github.com/linkerd/linkerd2-proxy/releases/tag/release/v2.333.0 Signed-off-by: l5d-bot <l5d-bot@users.noreply.github.com> Co-authored-by: l5d-bot <l5d-bot@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…22.0.0 (linkerd#14794) * build(deps): bump DavidAnson/markdownlint-cli2-action Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 21.0.0 to 22.0.0. - [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases) - [Commits](DavidAnson/markdownlint-cli2-action@30a0e04...07035fd) --- updated-dependencies: - dependency-name: DavidAnson/markdownlint-cli2-action dependency-version: 22.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * chore: wrap long lines Signed-off-by: katelyn martin <kate@buoyant.io> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: katelyn martin <kate@buoyant.io> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: katelyn martin <kate@buoyant.io> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…#14795) Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.1 to 5.5.2. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@5a10915...671740a) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 5.5.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6.0.0 to 7.0.0. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@018cc2c...37930b1) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…4808) Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 5.0.1 to 6.0.0. - [Release notes](https://github.com/dessant/lock-threads/releases) - [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md) - [Commits](dessant/lock-threads@1bf7ec2...7266a7c) --- updated-dependencies: - dependency-name: dessant/lock-threads dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…inkerd#14805) Bumps google.golang.org/protobuf from 1.36.10 to 1.36.11. --- updated-dependencies: - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [tokio-metrics](https://github.com/tokio-rs/tokio-metrics) from 0.4.5 to 0.4.6. - [Release notes](https://github.com/tokio-rs/tokio-metrics/releases) - [Changelog](https://github.com/tokio-rs/tokio-metrics/blob/main/CHANGELOG.md) - [Commits](https://github.com/tokio-rs/tokio-metrics/commits) --- updated-dependencies: - dependency-name: tokio-metrics dependency-version: 0.4.6 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…erd#14807) Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6.0.0 to 7.0.0. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@018cc2c...37930b1) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…d#14806) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@330a01c...b7c566a) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.19.2 to 3.19.4. - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.19.2...v3.19.4) --- updated-dependencies: - dependency-name: helm.sh/helm/v3 dependency-version: 3.19.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
) Bumps [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) from 5.0.1 to 5.1.0. - [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-bundle-analyzer@v5.0.1...v5.1.0) --- updated-dependencies: - dependency-name: webpack-bundle-analyzer dependency-version: 5.1.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from abdd2f68ea150cee8f236d4a9fb4e0f2491abf1b to e0021407031f5be11a464abee9a0776171c79891. - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@abdd2f6...e002140) --- updated-dependencies: - dependency-name: tj-actions/changed-files dependency-version: e0021407031f5be11a464abee9a0776171c79891 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [indexmap](https://github.com/indexmap-rs/indexmap) from 2.12.0 to 2.12.1. - [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md) - [Commits](indexmap-rs/indexmap@2.12.0...2.12.1) --- updated-dependencies: - dependency-name: indexmap dependency-version: 2.12.1 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
…etProfile (linkerd#14791) (Extracted from linkerd#14566) When hitting pods directly at their their IPs, ports in native sidecars that were marked as opaque via the `config.linkerd.io/opaque-ports` annotation, weren't really being marked as opaque. More concretely, the issue layed in the getProfile API, that was forgoing init containers when iterating over containers in this particular case. Endpoint profile translator tests got expanded, testing for opaque ports in both init and regular containers. Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps the kube group with 7 updates: | Package | From | To | | --- | --- | --- | | [k8s.io/api](https://github.com/kubernetes/api) | `0.34.2` | `0.34.3` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.2` | `0.34.3` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.34.2` | `0.34.3` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.2` | `0.34.3` | | [k8s.io/code-generator](https://github.com/kubernetes/code-generator) | `0.34.2` | `0.34.3` | | [k8s.io/endpointslice](https://github.com/kubernetes/endpointslice) | `0.34.2` | `0.34.3` | | [k8s.io/kube-aggregator](https://github.com/kubernetes/kube-aggregator) | `0.34.2` | `0.34.3` | Updates `k8s.io/api` from 0.34.2 to 0.34.3 - [Commits](kubernetes/api@v0.34.2...v0.34.3) Updates `k8s.io/apiextensions-apiserver` from 0.34.2 to 0.34.3 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.34.2...v0.34.3) Updates `k8s.io/apimachinery` from 0.34.2 to 0.34.3 - [Commits](kubernetes/apimachinery@v0.34.2...v0.34.3) Updates `k8s.io/client-go` from 0.34.2 to 0.34.3 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.34.2...v0.34.3) Updates `k8s.io/code-generator` from 0.34.2 to 0.34.3 - [Commits](kubernetes/code-generator@v0.34.2...v0.34.3) Updates `k8s.io/endpointslice` from 0.34.2 to 0.34.3 - [Commits](kubernetes/endpointslice@v0.34.2...v0.34.3) Updates `k8s.io/kube-aggregator` from 0.34.2 to 0.34.3 - [Commits](kubernetes/kube-aggregator@v0.34.2...v0.34.3) --- updated-dependencies: - dependency-name: k8s.io/api dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kube - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kube - dependency-name: k8s.io/apimachinery dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kube - dependency-name: k8s.io/client-go dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kube - dependency-name: k8s.io/code-generator dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kube - dependency-name: k8s.io/endpointslice dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kube - dependency-name: k8s.io/kube-aggregator dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kube ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [rustls-pki-types](https://github.com/rustls/pki-types) from 1.13.0 to 1.13.1. - [Release notes](https://github.com/rustls/pki-types/releases) - [Commits](rustls/pki-types@v/1.13.0...v/1.13.1) --- updated-dependencies: - dependency-name: rustls-pki-types dependency-version: 1.13.1 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [socket2](https://github.com/rust-lang/socket2) from 0.6.0 to 0.6.1. - [Release notes](https://github.com/rust-lang/socket2/releases) - [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md) - [Commits](rust-lang/socket2@v0.6.0...v0.6.1) --- updated-dependencies: - dependency-name: socket2 dependency-version: 0.6.1 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
Bumps [hostname](https://github.com/djc/hostname) from 0.4.1 to 0.4.2. - [Release notes](https://github.com/djc/hostname/releases) - [Commits](djc/hostname@v0.4.1...v0.4.2) --- updated-dependencies: - dependency-name: hostname dependency-version: 0.4.2 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Porta <porta.ivan@outlook.com>
19e9e8a to
7889cff
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Subject: Local Service Mirror in HA mode
Problem: In HA mode, the HA Helm values do not override
.Values.localServiceMirror.replicas, which defaults to1.Note: The template already sets
enablePodAntiAffinity: true, which will automatically create aPodDisruptionBudgetand apply the anti-affinity rules.Solution: Set
.Values.localServiceMirror.replicasto 3, matching the Linkerd control plane’s HA settings.Validation: The following command:
produces the expected result:
This confirms the localServiceMirror is running with three replicas as configured.