Change8

edge-25.8.2

Breaking Changes
📦 linkerd
1 breaking🐛 2 fixes🔧 3 symbols

Summary

This RECOMMENDED release updates numerous dependencies and switches the default routing table programming command from iptables-legacy to iptables-nft, requiring configuration changes for users needing the legacy mode.

⚠️ Breaking Changes

  • The default command for programming the routing table has switched from `iptables-legacy` to `iptables-nft`. To revert to the old behavior, set `proxyInit.iptablesMode: legacy` in the `linkerd2-control-plane` chart or `iptablesMode: legacy` in the `linkerd2-cni` chart.

Migration Steps

  1. If you require the legacy iptables mode, configure it explicitly: set `proxyInit.iptablesMode: legacy` in the `linkerd2-control-plane` chart or `iptablesMode: legacy` in the `linkerd2-cni` chart.

🐛 Bug Fixes

  • Allowed aws-lc-fips-sys licenses in deny.toml.
  • Fixed environment variables for building the policy controller for arm64.

🔧 Affected Symbols

proxyInitlinkerd2-control-planelinkerd2-cni