Matei David
Matei David
#9033 surfaced an issue with running multicluster on the latest k8s version. As a result, we might want to run the multicluster tests on both the minimum and max supported...
This change adds another job in the workflow to run multicluster tests on two separate k8s versions. As part of the change, some just recipes have been added to simplify...
### What problem are you trying to solve? As described in #8070, the `linkerd-cni` plugin has two race conditions that come into play usually when a node is drained or...
[make-show-all]: https://github.com/linkerd/linkerd2-proxy-init/blob/5df92e7eb6352f8bfc604390a1dc47eacd32992e/iptables/iptables.go#L352-L354 [rule-check]: https://github.com/linkerd/linkerd2-proxy-init/blob/5df92e7eb6352f8bfc604390a1dc47eacd32992e/iptables/iptables.go#L78-L84 In our proxy-init code, we make use of `iptables-save` to [get a dump of all existing rules][make-show-all] and chains in machine consumable format. It is important...
We now support calling into any available iptables variant in `proxy-init`. Currently, our integration tests only cover `iptables-legacy` (symlinked to `iptables` in alpine). We should duplicate the tests (or write...
Linkerd CLI uses untyped values for certain fields, such as `nodeAffinity`, `deploymentStrategy` and `tolerations`. https://github.com/linkerd/linkerd2/blob/main/pkg/charts/linkerd2/values.go#L28 For extra type safety, we could leverage upstream (Kubernetes) types. This has the advantage of...
Our CNI plugin currently only logs to `stderr`: https://github.com/linkerd/linkerd2/blob/d76c42010cae62863e6228d022971b98bb48a385/cni-plugin/main.go#L94-L95 CNI plugins run directly on the host, which makes it hard to access log -- and impossible to do through `kubectl...
### What problem are you trying to solve? It's not uncommon to see people using `cert-manager` together with linkerd. To help with automation, linkerd supports installing the control plane without...
Hi 👋 I was recently working on adding `OpenAPI` validation to existing crds in linkerd. For TrafficSplit I thought I'd come straight to the source so I took the validation...
The `--no-deploy` flag seems to have been deprecated and replaced with `--disable`. Newer k3d versions (tested with `v5.4.3` and above) will not work with our current justfile recipe. Our dev...