buoyant.io

Buoyant Enterprise for Linkerd

enterprise-2.20.6

November 3, 2026

The 2.20.6 stable point release adds annotations to configure proxy tap limits and fixes the proxy injector to inherit the beta native sidecar annotation from the namespace. This release also updates some dependencies to address reported CVEs in underlying components.

Previous release: enterprise-2.20.5.

Supported Kubernetes versions

For this release, the minimum supported Kubernetes version remains 1.31, and the maximum supported Kubernetes version remains 1.37.

Who should upgrade?

Users who disable native sidecars with the deprecated config.beta.linkerd.io/proxy-enable-native-sidecar: "false" annotation on a namespace should upgrade.

Other users may upgrade to this release at their convenience to take advantage of the fixes and addressed CVEs.

Upgrade guidance

This is a stable point release designed to introduce minimal change. Please see the instructions in Upgrading BEL for how to upgrade.

To upgrade with BEL’s lifecycle automation operator, you will need Buoyant Extension v0.41.1 or later.

Changelog

  • Add tap.buoyant.io/max-concurrent, tap.buoyant.io/max-lifetime, and tap.buoyant.io/headers-allow annotations to configure proxy tap limits on a namespace or workload.
  • Fix the proxy injector to inherit the beta native sidecar annotation from the namespace.
  • Update golang to remediate
  • Update golang.org/x/net dependency to remediate