edge-25.6.3
Breaking Changes📦 linkerd
⚠ 2 breaking✨ 1 features🐛 3 fixes🔧 6 symbols
Summary
This release is NOT RECOMMENDED and suggests upgrading to edge-25.8.1. It introduces breaking changes by updating gRPC histogram buckets and renaming container ports to satisfy Kubernetes 1.33 requirements, alongside bug fixes and new gRPC server metrics in the policy controller.
⚠️ Breaking Changes
- The histogram buckets for gRPC handling-time histograms have changed. This is potentially breaking if external monitoring relies on the exact bucket definitions.
- Port names used in Linkerd deployments have been updated to ensure uniqueness required by Kubernetes 1.33. This affects configurations referencing these ports by name in the following components: destination (grpc -> dest-grpc, admin-http -> dest-admin), sp-validator (admin-http -> spval-admin), policy-controller (grpc -> policy-grpc, admin-http -> policy-admin), identity (grpc -> ident-grpc, admin-http -> ident-admin), proxy-injector (admin-http -> injector-admin), and linkerd2-cni (admin-http -> repair-admin).
Migration Steps
- Review any monitoring configurations that rely on the specific bucket definitions of gRPC handling-time histograms and update them if necessary.
- If you are using custom configurations or manifests that explicitly reference the old port names (grpc, admin-http) within the affected components, update them to use the new, disambiguated names (e.g., dest-grpc, dest-admin, etc.).
✨ New Features
- Added common gRPC server metrics to the policy controller.
🐛 Bug Fixes
- Fixed an issue where inbound policy couldn't be applied to the metrics port when using native sidecars ([#14103]).
- Fixed policy-test e2e_appprotocol.
- Fixed policy-controller to properly index named ports in native sidecar containers.
🔧 Affected Symbols
destinationsp-validatorpolicy-controlleridentityproxy-injectorlinkerd2-cni