Skip to content

Add imagePullSecrets support to linkerd-jaeger namespace-metadata ServiceAccount#11504

Merged
alpeb merged 1 commit intomainfrom
alpeb/imagepull-secrets
Oct 18, 2023
Merged

Add imagePullSecrets support to linkerd-jaeger namespace-metadata ServiceAccount#11504
alpeb merged 1 commit intomainfrom
alpeb/imagepull-secrets

Conversation

@alpeb
Copy link
Member

@alpeb alpeb commented Oct 18, 2023

This completes imagePullSecret support for all ServiceAccounts in the linkerd control plane and core extensions.

…rviceAccount

This completes imagePullSecret support for _all_ ServiceAccounts in the
linkerd control plane and core extensions.
@alpeb alpeb requested a review from a team as a code owner October 18, 2023 20:14
@alpeb alpeb changed the title Add imagePullSecrets support to linkerd-jaegers namespace-metadata ServiceAccount Add imagePullSecrets support to linkerd-jaeger namespace-metadata ServiceAccount Oct 18, 2023
@hawkw hawkw requested a review from a team October 18, 2023 20:35
Copy link
Member

@adleong adleong left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can confirm that this is the only ServiceAccount template in any of the charts in the linkerd2 repo that was missing image pull secrets.

@alpeb alpeb merged commit c1b52ee into main Oct 18, 2023
@alpeb alpeb deleted the alpeb/imagepull-secrets branch October 18, 2023 23:24
@hawkw hawkw mentioned this pull request Oct 19, 2023
hawkw added a commit that referenced this pull request Oct 19, 2023
## edge-23.10.3

This edge release fixes issues in the proxy and destination controller which can
result in Linkerd proxies sending traffic to stale endpoints. In addition, it
contains other bugfixes and updates dependencies to include patches for the
security advisories [CVE-2023-44487]/GHSA-qppj-fm5r-hxr3 and GHSA-c827-hfw6-qwvm.

* Fixed an issue where the Destination controller could stop processing
  changes in the endpoints of a destination, if a proxy subscribed to that
  destination stops reading service discovery updates. This issue results in
  proxies attempting to send traffic for that destination to stale endpoints
  ([#11483], fixes [#11480], [#11279], and [#10590])
* Fixed a regression introduced in stable-2.13.0 where proxies would not
  terminate unused service discovery watches, exerting backpressure on the
  Destination controller which could cause it to become stuck
  ([linkerd2-proxy#2484] and [linkerd2-proxy#2486])
* Added `INFO`-level logging to the proxy when endpoints are added or removed
  from a load balancer. These logs are enabled by default, and can be disabled
  by [setting the proxy log level][proxy-log-level] to
  `warn,linkerd=info,linkerd_proxy_balance=warn` or similar
  ([linkerd2-proxy#2486])
* Fixed a regression where the proxy rendered `grpc_status` metric labels as a
  string rather than as the numeric status code ([linkerd2-proxy#2480]; fixes
  [#11449])
* Added missing `imagePullSecrets` to `linkerd-jaeger` ServiceAccount ([#11504])
* Updated the control plane's dependency on the `golang.google.org/grpc` Go
  package to include patches for [CVE-2023-44487]/GHSA-qppj-fm5r-hxr3 ([#11496])
* Updated dependencies on `rustix` to include patches for GHSA-c827-hfw6-qwvm
  ([linkerd2-proxy#2488] and [#11512]).

[#10590]: #10590
[#11279]: #11279
[#11483]: #11483
[#11449]: #11449
[#11480]: #11480
[#11504]: #11504
[#11504]: #11512
[linkerd2-proxy#2480]: linkerd/linkerd2-proxy#2480
[linkerd2-proxy#2484]: linkerd/linkerd2-proxy#2484
[linkerd2-proxy#2486]: linkerd/linkerd2-proxy#2486
[linkerd2-proxy#2488]: linkerd/linkerd2-proxy#2488
[proxy-log-level]: https://linkerd.io/2.14/tasks/modifying-proxy-log-level/
[CVE-2023-44487]: GHSA-qppj-fm5r-hxr3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants