Change8

edge-25.2.1

Breaking Changes
📦 linkerd
2 breaking6 features🐛 1 fixes🔧 3 symbols

Summary

This release significantly enhances OpenTelemetry compatibility, introduces metrics for issuer certificate TTL, and fixes a policy update bug related to HTTPRoutes without specified ports. It also relaxes the requirement for Gateway API CRDs during `linkerd install`.

⚠️ Breaking Changes

  • The `hostname` label for inbound HTTP and TLS metrics will always have an empty value.
  • The `authority` label has been removed from inbound HTTP metrics.

Migration Steps

  1. If you rely on the `hostname` label for inbound HTTP or TLS metrics, be aware that it will now be empty. If you rely on the `authority` label, remove usage as it has been removed.

✨ New Features

  • Added support for the `OTEL_RESOURCE_ATTRIBUTES` environment variable for OpenTelemetry compatibility.
  • Correctly propagates OpenTelemetry trace attributes from the client side of a request.
  • Improved support for OpenTelemetry trace attributes, including pod UID and container name.
  • Added a new `issuer_cert_ttl_seconds` gauge metric to expose the time remaining until the identity issuer certificate expires.
  • Labels on mirrored `Service`s are now propagated to their mirrored versions.
  • Allows `linkerd install` to work without the Gateway API CRDs installed.

🐛 Bug Fixes

  • Fixed a bug that could result in HTTPRoutes with no `port` specified ending up with stale policy information.

🔧 Affected Symbols

inbound HTTP metricsTLS metricslinkerd install