From 7387b54da0ce214f78a5531d0a95bca6236765c4 Mon Sep 17 00:00:00 2001 From: Eliza Weisman Date: Wed, 9 Aug 2023 13:30:10 -0700 Subject: [PATCH] stable-2.13.6 This stable release fixes a regression introduced in stable-2.13.0 which resulted in proxies shedding load too aggressively while under moderate request load to a single service ([#11055]). In addition, it updates the base image for the `linkerd-cni` initcontainer to resolve a CVE in `libdb` ([#11196]), fixes a race condition in the Destination controller that could cause it to crash ([#11163]), as well as fixing a number of other issues. * Control Plane * Fixed a race condition in the destination controller that could cause it to panic ([#11169]; fixes [#11193]) * Improved the granularity of logging levels in the control plane ([#11147]) * Replaced incorrect `server_port_subscribers` gauge in the Destination controller's metrics with `server_port_subscribes` and `server_port_unsubscribes` counters ([#11206]; fixes [#10764]) * Proxy * Changed the default HTTP request queue capacities for the inbound and outbound proxies back to 10,000 requests ([#11198]; fixes [#11055]) * CLI * Updated extension CLI commands to prefer the `--registry` flag over the `LINKERD_DOCKER_REGISTRY` environment variable, making the precedence more consistent (thanks @harsh020!) (see [#11144]) * CNI * Updated `linkerd-cni` base image to resolve [CVE-2019-8457] in `libdb` ([#11196]) * Changed the CNI plugin installer to always run in 'chained' mode; the plugin will now wait until another CNI plugin is installed before appending its configuration ([#10849]) * Removed `hostNetwork: true` from linkerd-cni Helm chart templates ([#11158]; fixes [#11141]) (thanks @abhijeetgauravm!) * Multicluster * Fixed the `linkerd multicluster check` command failing in the presence of lots of mirrored services ([#10764]) [#10764]: https://github.com/linkerd/linkerd2/issues/10764 [#10849]: https://github.com/linkerd/linkerd2/issues/10849 [#11055]: https://github.com/linkerd/linkerd2/issues/11055 [#11141]: https://github.com/linkerd/linkerd2/issues/11141 [#11144]: https://github.com/linkerd/linkerd2/issues/11144 [#11147]: https://github.com/linkerd/linkerd2/issues/11147 [#11158]: https://github.com/linkerd/linkerd2/issues/11158 [#11163]: https://github.com/linkerd/linkerd2/issues/11163 [#11169]: https://github.com/linkerd/linkerd2/issues/11169 [#11196]: https://github.com/linkerd/linkerd2/issues/11196 [#11198]: https://github.com/linkerd/linkerd2/issues/11198 [#11206]: https://github.com/linkerd/linkerd2/issues/11206 [CVE-2019-8457]: https://avd.aquasec.com/nvd/2019/cve-2019-8457/ --- CHANGES.md | 53 +++++++++++++++++++ charts/linkerd-control-plane/Chart.yaml | 2 +- charts/linkerd-control-plane/README.md | 2 +- charts/linkerd2-cni/Chart.yaml | 2 +- charts/linkerd2-cni/README.md | 2 +- jaeger/charts/linkerd-jaeger/Chart.yaml | 2 +- jaeger/charts/linkerd-jaeger/README.md | 2 +- .../charts/linkerd-multicluster/Chart.yaml | 2 +- .../charts/linkerd-multicluster/README.md | 2 +- viz/charts/linkerd-viz/Chart.yaml | 2 +- viz/charts/linkerd-viz/README.md | 2 +- 11 files changed, 63 insertions(+), 10 deletions(-) diff --git a/CHANGES.md b/CHANGES.md index ff17790fb5fb4..cbae97cf2352f 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,5 +1,58 @@ # Changes +## stable-2.13.6 + +This stable release fixes a regression introduced in stable-2.13.0 which +resulted in proxies shedding load too aggressively while under moderate request +load to a single service ([#11055]). In addition, it updates the base image for +the `linkerd-cni` initcontainer to resolve a CVE in `libdb` ([#11196]), fixes a +race condition in the Destination controller that could cause it to crash +([#11163]), as well as fixing a number of other issues. + +* Control Plane + * Fixed a race condition in the destination controller that could cause it to + panic ([#11169]; fixes [#11163]) + * Improved the granularity of logging levels in the control plane ([#11147]) + * Replaced incorrect `server_port_subscribers` gauge in the Destination + controller's metrics with `server_port_subscribes` and + `server_port_unsubscribes` counters ([#11206]; fixes [#10764]) + +* Proxy + * Changed the default HTTP request queue capacities for the inbound and + outbound proxies back to 10,000 requests ([#11198]; fixes [#11055]) + +* CLI + * Updated extension CLI commands to prefer the `--registry` flag over the + `LINKERD_DOCKER_REGISTRY` environment variable, making the precedence more + consistent (thanks @harsh020!) (see [#11144]) + +* CNI + * Updated `linkerd-cni` base image to resolve [CVE-2019-8457] in `libdb` + ([#11196]) + * Changed the CNI plugin installer to always run in 'chained' mode; the plugin + will now wait until another CNI plugin is installed before appending its + configuration ([#10849]) + * Removed `hostNetwork: true` from linkerd-cni Helm chart templates + ([#11158]; fixes [#11141]) (thanks @abhijeetgauravm!) + +* Multicluster + * Fixed the `linkerd multicluster check` command failing in the presence of + lots of mirrored services ([#10764]) + +[#10764]: https://github.com/linkerd/linkerd2/issues/10764 +[#10849]: https://github.com/linkerd/linkerd2/issues/10849 +[#11055]: https://github.com/linkerd/linkerd2/issues/11055 +[#11141]: https://github.com/linkerd/linkerd2/issues/11141 +[#11144]: https://github.com/linkerd/linkerd2/issues/11144 +[#11147]: https://github.com/linkerd/linkerd2/issues/11147 +[#11158]: https://github.com/linkerd/linkerd2/issues/11158 +[#11163]: https://github.com/linkerd/linkerd2/issues/11163 +[#11169]: https://github.com/linkerd/linkerd2/issues/11169 +[#11196]: https://github.com/linkerd/linkerd2/issues/11196 +[#11198]: https://github.com/linkerd/linkerd2/issues/11198 +[#11206]: https://github.com/linkerd/linkerd2/issues/11206 +[CVE-2019-8457]: https://avd.aquasec.com/nvd/2019/cve-2019-8457/ + ## stable-2.13.5 This stable release fixes a memory leak in the multicluster extension and fixes diff --git a/charts/linkerd-control-plane/Chart.yaml b/charts/linkerd-control-plane/Chart.yaml index 4a7357acf9114..0e4a2c86482c1 100644 --- a/charts/linkerd-control-plane/Chart.yaml +++ b/charts/linkerd-control-plane/Chart.yaml @@ -16,7 +16,7 @@ dependencies: - name: partials version: 0.1.0 repository: file://../partials -version: 1.12.5 +version: 1.12.6 icon: https://linkerd.io/images/logo-only-200h.png maintainers: - name: Linkerd authors diff --git a/charts/linkerd-control-plane/README.md b/charts/linkerd-control-plane/README.md index 60a73dca7a2c0..9dc5651fc5bed 100644 --- a/charts/linkerd-control-plane/README.md +++ b/charts/linkerd-control-plane/README.md @@ -3,7 +3,7 @@ Linkerd gives you observability, reliability, and security for your microservices — with no code change required. -![Version: 1.12.5](https://img.shields.io/badge/Version-1.12.5-informational?style=flat-square) +![Version: 1.12.6](https://img.shields.io/badge/Version-1.12.6-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: edge-XX.X.X](https://img.shields.io/badge/AppVersion-edge--XX.X.X-informational?style=flat-square) diff --git a/charts/linkerd2-cni/Chart.yaml b/charts/linkerd2-cni/Chart.yaml index 6b4d1c39e4d83..7a8a83d28c559 100644 --- a/charts/linkerd2-cni/Chart.yaml +++ b/charts/linkerd2-cni/Chart.yaml @@ -9,4 +9,4 @@ description: | kubeVersion: ">=1.21.0-0" icon: https://linkerd.io/images/logo-only-200h.png name: "linkerd2-cni" -version: 30.8.3 +version: 30.8.4 diff --git a/charts/linkerd2-cni/README.md b/charts/linkerd2-cni/README.md index fce93a01e9836..2ffa845f3fd0a 100644 --- a/charts/linkerd2-cni/README.md +++ b/charts/linkerd2-cni/README.md @@ -6,7 +6,7 @@ Linkerd [CNI plugin](https://linkerd.io/2/features/cni/) takes care of setting up your pod's network so incoming and outgoing traffic is proxied through the data plane. -![Version: 30.8.3](https://img.shields.io/badge/Version-30.8.3-informational?style=flat-square) +![Version: 30.8.4](https://img.shields.io/badge/Version-30.8.4-informational?style=flat-square) ![AppVersion: edge-XX.X.X](https://img.shields.io/badge/AppVersion-edge--XX.X.X-informational?style=flat-square) diff --git a/jaeger/charts/linkerd-jaeger/Chart.yaml b/jaeger/charts/linkerd-jaeger/Chart.yaml index e9da13fc84bc3..b4c562035239f 100644 --- a/jaeger/charts/linkerd-jaeger/Chart.yaml +++ b/jaeger/charts/linkerd-jaeger/Chart.yaml @@ -11,7 +11,7 @@ kubeVersion: ">=1.21.0-0" name: linkerd-jaeger sources: - https://github.com/linkerd/linkerd2/ -version: 30.8.5 +version: 30.8.6 icon: https://linkerd.io/images/logo-only-200h.png maintainers: - name: Linkerd authors diff --git a/jaeger/charts/linkerd-jaeger/README.md b/jaeger/charts/linkerd-jaeger/README.md index 24f621cb1b362..54239f537e314 100644 --- a/jaeger/charts/linkerd-jaeger/README.md +++ b/jaeger/charts/linkerd-jaeger/README.md @@ -3,7 +3,7 @@ The Linkerd-Jaeger extension adds distributed tracing to Linkerd using OpenCensus and Jaeger. -![Version: 30.8.5](https://img.shields.io/badge/Version-30.8.5-informational?style=flat-square) +![Version: 30.8.6](https://img.shields.io/badge/Version-30.8.6-informational?style=flat-square) ![AppVersion: edge-XX.X.X](https://img.shields.io/badge/AppVersion-edge--XX.X.X-informational?style=flat-square) diff --git a/multicluster/charts/linkerd-multicluster/Chart.yaml b/multicluster/charts/linkerd-multicluster/Chart.yaml index d09262c03186b..edb6da7a46f3d 100644 --- a/multicluster/charts/linkerd-multicluster/Chart.yaml +++ b/multicluster/charts/linkerd-multicluster/Chart.yaml @@ -11,7 +11,7 @@ kubeVersion: ">=1.21.0-0" name: "linkerd-multicluster" sources: - https://github.com/linkerd/linkerd2/ -version: 30.7.5 +version: 30.7.6 icon: https://linkerd.io/images/logo-only-200h.png maintainers: - name: Linkerd authors diff --git a/multicluster/charts/linkerd-multicluster/README.md b/multicluster/charts/linkerd-multicluster/README.md index b542a525c00e3..195adc777b83c 100644 --- a/multicluster/charts/linkerd-multicluster/README.md +++ b/multicluster/charts/linkerd-multicluster/README.md @@ -3,7 +3,7 @@ The Linkerd-Multicluster extension contains resources to support multicluster linking to remote clusters -![Version: 30.7.5](https://img.shields.io/badge/Version-30.7.5-informational?style=flat-square) +![Version: 30.7.6](https://img.shields.io/badge/Version-30.7.6-informational?style=flat-square) ![AppVersion: edge-XX.X.X](https://img.shields.io/badge/AppVersion-edge--XX.X.X-informational?style=flat-square) diff --git a/viz/charts/linkerd-viz/Chart.yaml b/viz/charts/linkerd-viz/Chart.yaml index 97f1c66b97aad..a8a3331d3d51e 100644 --- a/viz/charts/linkerd-viz/Chart.yaml +++ b/viz/charts/linkerd-viz/Chart.yaml @@ -11,7 +11,7 @@ kubeVersion: ">=1.21.0-0" name: "linkerd-viz" sources: - https://github.com/linkerd/linkerd2/ -version: 30.8.5 +version: 30.8.6 icon: https://linkerd.io/images/logo-only-200h.png maintainers: - name: Linkerd authors diff --git a/viz/charts/linkerd-viz/README.md b/viz/charts/linkerd-viz/README.md index 35749c24fec21..1c289c4705913 100644 --- a/viz/charts/linkerd-viz/README.md +++ b/viz/charts/linkerd-viz/README.md @@ -3,7 +3,7 @@ The Linkerd-Viz extension contains observability and visualization components for Linkerd. -![Version: 30.8.5](https://img.shields.io/badge/Version-30.8.5-informational?style=flat-square) +![Version: 30.8.6](https://img.shields.io/badge/Version-30.8.6-informational?style=flat-square) ![AppVersion: edge-XX.X.X](https://img.shields.io/badge/AppVersion-edge--XX.X.X-informational?style=flat-square)