With #2472, the proxy injector webhook now mutates the pod spec directly. This results in discrepancies between the YAML output generated by the linkerd inject command and that by the webhook.

At runtime, the output of kubectl describe [deploy|sts|job|rc|dameonset] of an auto-injected workload will not have the proxy specs, because the webhook modifies the pod specs, instead of its owner's pod template. The specs of the live pod becomes the only source of truth, which can be confusing for support purposes.

For 2.4, one way to consolidate that this is, as @grampelberg and @alpeb suggested, to devolve the linkerd inject to just adding linkerd annotations.

cc @grampelberg