●Change8

edge-25.1.1

Breaking Changes
📦 linkerd
⚠ 1 breaking✨ 5 features🐛 3 fixes🔧 4 symbols

Summary

This release bumps the minimum required TLS version to v1.3, adds RHEL iptables support, allows communication with unready pods, and introduces configuration options for pod annotations and Viz dashboard labels. This release is marked as NOT RECOMMENDED; use edge-25.1.2 instead.

⚠️ Breaking Changes

  • The minimum TLS version required when communicating with the Kubernetes API server has been bumped to v1.3. Ensure your Kubernetes API server supports TLS v1.3 (supported since v1.19, but Linkerd requires at least v1.22).

Migration Steps

  1. If you set `proxyInit.closeWaitTimeoutSecs`, you must now also ensure that `proxy.runAsRoot` is set, as this is now validated at install time.

✨ New Features

  • Added proper iptables support for RHEL nodes.
  • Linkerd can now talk to running Pods that have not yet passed readiness checks.
  • Allows specifying `podAnnotations` per deployment via Helm.
  • Allows specifying labels for the Viz dashboard.
  • Added pod UID and proxy container name to the environment variables.

🐛 Bug Fixes

  • Correctly handles proxy log levels that contain quotes.
  • CLI output for port forwarding errors has been cleaned up.
  • Fixed a bug related to installing extensions with Helm in IPv6 clusters.

🔧 Affected Symbols

proxyproxyInitViz dashboardLink CR