Simon Dickhoven

leader election namespace should default to `.Release.Namespace`, not `kube-system`

12

**Describe the bug**: The helm chart defaults the leader election namespace to `kube-system`. https://github.com/cert-manager/cert-manager/blob/v1.14.1/deploy/charts/cert-manager/values.yaml#L50 however, when deploying cert-manager to a different namespace (which should be an uncontroversial deployment strategy), this...

BUG: fix race condition

8

this pr fixes a race condition that occurs when new cni config files are created while the `install-cni.sh` script is executing anywhere here: https://github.com/linkerd/linkerd2-proxy-init/blob/cni-plugin/v1.6.0/cni-plugin/deployment/scripts/install-cni.sh#L323-L348 we have observed this race condition...

provider v5.x does not implement api rate limiting resulitng in 429 errors

12

### Confirmation - [x] This is a bug with an existing resource and is not a feature request or enhancement. Feature requests should be submitted with Cloudflare Support or your...

network policy rules are incorrectly updated with kustomization labels

9

### What happened? kustomize incorrectly updates network policy _rules_ (rather than just the `podSelector`) when using `labels` with `includeSelectors: true` or `commonLabels` in the kustomization. ### What did you expect...

fix(linkerd-cni): prevent parent from outpacing forked `monitor_cni_config()` process

2

this pr addresses a race condition in which the parent process outpaces the forked `monitor_cni_config()` process. this race condition was observed in a production cluster and can clearly be seen...