Linkerd 2.7 release, this version with safety as the theme, highlights include major update adds the Linkerd cross-TLS certificate basis with external publishers (such as Vault, cert-manager) integration support, improved GipOps workflow, and make it Ease automatically rotate TLS credentials; dashboard also improves the performance and increases the availability of Helm chart.
External PKI support
Linkerd New support for external PKI providers brought a lot of new features Linkerd. First, it means you can use Vault projects and cert-manager of the class to provide credentials Linkerd used to sign TLS certificates. For GitOps, this means Linkerd list can now be generated without a key, so you can safely checked into version control.
It also means that, regardless of where they come from, can now be easily and automatically rotate Linkerd of mTLS credentials, this process is currently still are manual.
Improved dashboard
dashboard now shows CronJob and ReplicaSet resources, Grafana dashboard and comes pre-configured for them. Currently function has been introduced in v2.6 of the tapheader to the dashboard, you can prevent DNS rebinding attack. It also solves a number of other minor issues.
other
Linkerd 2.7 Dui Helm chart made some significant improvements, including splitting CNI template for a separate chart, fixes a number of issues, and generally update the chart to follow the best practices community.
In addition this release also provides a number of other improvements, performance enhancements and bug fixes, including:
- Headless support service (headless services).
- Acting delay new logo off
--wait-before-exit-seconds. - Improved error classification gRPC services.
linkerd checkAdded some features, including state and CNI plug-TLS certificate validation.
annouce: