Skip to content

Releases: linkerd/linkerd2-proxy-init

cni-plugin v1.0.0

02 Feb 18:32
109f072
Compare
Choose a tag to compare
This is our first release from `linkerd2-proxy-init`; This code has been moved
from `linkerd2` with some slight reorganization. Most of the work has been related
to testing and thus not reflected in these release notes.

Changes from `linkerd2` release:

* dev: bumped dev to v39
* use k8s client-go rather than internal linkerd k8s client
* initialize logging immediately
* changed log level from `debug` to `info` for CNI check & delete
* iptables: When existing chains are found, log at `info`
* iptables: converted `nsenter` syntax to use the more moden `--net=%s`
  argument syntax
* iptables: Make iptables rule application idempotent upon init pod
  restart (thanks @jim-minter!)

proxy-init v2.2.0

19 Sep 21:55
7161a3e
Compare
Choose a tag to compare
iptables idempotence and small fixes

* dev: bump to v39
* iptables: When existing chains are found, log at `info`
* iptables: converted `nsenter` syntax to use the more moden `--net=%s` argument syntax
* iptables: Make iptables rule application idempotent upon init pod restart (thanks @jim-minter!)

validator v0.1.1

22 Nov 13:53
62ac9b1
Compare
Choose a tag to compare
Add prescriptive logging messages when validator fails

This release adds more logging capabilities to `linkerd-network-validator`. The
new failure messages will allow users to know whether the validator has failed
as intended (i.e when testing network configuration) or if it has failed due to
an error in the environment.

proxy-init v2.1.0

18 Oct 15:26
b885ac3
Compare
Choose a tag to compare
Added the validator to the build process.

 * Split proxy-init and validator into separate release processes (#115)
 * Bump actions/cache from 3.0.8 to 3.0.9 (#110)
 * Bump library/rust from 1.63.0-slim to 1.64.0-slim (#109)
 * Changing --no-deploy to --disable as per the fatal error warning message (#108)
 * dev: Update devcontainer to v30 (#105)
 * Bump actions/cache from 3.0.7 to 3.0.8 (#104)
 * Add validator to build process (#103)
 * Update to Rust 1.63 (#102)
 * Add a container network validation utility (#92)
 * dev: Update to v28 (#100)

validator v0.1.0

12 Oct 22:40
8ad75f9
Compare
Choose a tag to compare

This is the first release of the linkerd-network-validator utility. It will be included as
a part of the proxy container image to validate that iptables is properly configured.

What's Changed

New Contributors

Full Changelog: v2.0.0...validator/v0.1.0

v2.0.0

16 Aug 14:55
6c576e4
Compare
Choose a tag to compare

What's Changed

proxy-init sources have been moved to a new location thereby breaking API compatibility with previous versions. Base images have also been bumped to get new security updates. Lastly, Go has been bumped to v1.18.

  • dev: Add a devcontainer, update dependabot
  • Bump golang from 1.16.9-alpine3.14 to 1.18.2-alpine3.14
  • Bump alpine from 3.14.2 to 3.16.1
  • ci: Use devcontainer in workflows
  • dev: Update integration test harness
  • dev: Update tester to Go 1.18
  • dev: Set a timeout when testing failed connections
  • Update Go version to v1.18
  • Bump alpine from 3.16.1 to 3.16.2
  • Move all go code into the proxy-init directory
  • Enable Go linters

Full Changelog: v1.6.2...v2.0.0

v1.6.2

25 Jul 09:08
5942913
Compare
Choose a tag to compare

What's Changed

This release adds system capabilities to xtables-nft-multi binary. Aside from
sys caps, this release also adds a new just recipe to prune cache layers and
bumps several dependencies.

v1.6.1

18 Jul 13:06
9e50580
Compare
Choose a tag to compare

What's Changed

  • Fix issue with --wait flag where the flag would be applied to iptables-save
    resulting in errors when configuring the firewall.

v1.6.0

14 Jul 14:36
5df92e7
Compare
Choose a tag to compare

What's Changed


New linkerd2-proxy-init release adds support for iptables-nft by adding two new CLI flags that specify the binaries for iptables and iptables-save. Both default to the legacy version of iptables on Alpine.

  • Added support for iptables-nft
  • Bump github.com/spf13/cobra from 1.4.0 to 1.5.0

v1.5.3

16 Feb 15:50
a556ca4
Compare
Choose a tag to compare

What's Changed

  • Bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  • Lowercase logs and remove redundant lines