The Buoyant Extension is an aggregate package that includes the Linkerd lifecycle automation operator, the Buoyant Cloud agent, and certain BEL-specific linkerd CLI features.
buoyant-cloud-metrics to v0.42.0.linkerd-control-plane-operator to support latest edge releases.
View all supported versions for this release.enterprise-2.16.0 was already installed.buoyant diagnostics
CLI command.buoyant-cloud-agent to start sending information about CRDs that
were newly added in Linkerd
2.16 to
Buoyant Cloud.linkerd-control-plane-operator to support latest edge, enterprise,
and hotpatch releases. View all supported versions for this release.linkerd-cni extension is installed.linkerd-control-plane-operator to support latest edge, enterprise,
and hotpatch releases. View all supported versions for this release.import-helm-config CLI
command to not require identityTrustAnchorsPEM when externalCA is set.linkerd-data-plane-operator to support restarting proxies running in
native sidecar containers.buoyant-cloud-agent to fix a serialization issue with v1beta1
Server resources on Linkerd 2.14 clusters.linkerd-control-plane-operator to support latest edge and patch
releases. View all supported versions for this release.golang.org/x/net dependency to remediate
CVE-2023-45288.licenseSecret Helm value to allow users to provide their Buoyant
License via a Kubernetes secret.additionalVolumes and additionalVolumeMounts Helm values to allow
users to mount additional volumes and volumeMounts to any Buoyant Extension
container.spec.components.linkerd.licenseSecret field to the Managed Linkerd
ControlPlane CRD, to allow users to provide their Buoyant License via a
Kubernetes secret.linkerd-control-plane-operator to support up to enterprise-2.15.2.
View all supported versions for this release.linkerd-buoyant check CLI output to check the
linkerd-control-plane-validator workload, and also point to new doc
versions.github.com/docker/docker dependency to remediate
CVE-2024-21626 and
CVE-2024-24557github.com/golang/protobuf dependency to remediate
CVE-2024-24786google.golang.org/grpc dependency to remediate
CVE-2023-44487linkerd-control-plane-operator not supporting dynamic updates of
enterprise patch releases in some cases.linkerd-control-plane-operator to give all users access to dynamic
updates to the latest Linkerd versions, not just Buoyant Cloud customers.linkerd-control-plane-operator to support up to enterprise-2.15.1.
View all supported versions for this release.linkerd-control-plane-operator to support up to enterprise-2.15.0,
or enterprise-2.15.1 when Buoyant Cloud is installed.
View all supported versions for this release.linkerd-control-plane-operator support for enterprise-2.15 releases.
Unlike enterprise-2.14.10-0, enterprise-2.15 is hosted publicly, and no
longer requires the controlPlaneOperator.helmRepoPrefix and
controlPlaneOperator.helmDockerConfigJSONSecret values.linkerd-control-plane-operator to support up to
enterprise-2.14.9-3. View all supported versions for this release.linkerd-control-plane-operator to support up to
enterprise-2.14.9-1, or enterprise-2.14.9-3 when Buoyant Cloud is
installed. View all supported versions for this release.linkerd-control-plane-operator support for managed upgrades to the new
Buoyant Enterprise for Linkerd preview channel, along with managed
downgrades from preview to enterprise.linkerd-control-plane-operator to support up to
enterprise-2.14.8-1, or enterprise-2.14.9-1 when Buoyant Cloud is
installed. View all supported versions for this release.linkerd-control-plane-operator support for the new Buoyant Enterprise
for Linkerd preview channel. Note: The operator does not currently support
migration to/from the preview channel, only fresh installations.linkerd-control-plane-operator to support up to
enterprise-2.14.7-0, or enterprise-2.14.8-0 when Buoyant Cloud is
installed. View all supported versions for this release.spec.components.linkerd.crdsConfig field to the Managed Linkerd
ControlPlane CRD, to allow configuring linkerd-crds.linkerd-control-plane-operator to support up to
enterprise-2.14.6-0. View all supported versions for this release.linkerd-control-plane-operator to support up to
enterprise-2.14.5-1. View all supported versions for this release.controlPlaneOperator.helmRepoPrefix to allow overriding the
default Buoyant Enterprise for Linkerd Helm registry.controlPlaneOperator.helmNoTLS to allow disabling TLS when
fetching Buoyant Enterprise for Linkerd Helm charts.ControlPlane custom resource ergonomics when installing a
FIPS-enabled Buoyant Enterprise for Linkerd control plane.buoyant-cloud-agent, linkerd-control-plane-operator, and
linkerd-data-plane-operator to better abide by cpu and memory limits, via
automaxprocs.linkerd-control-plane-operator to support up to
enterprise-2.14.1-2, or enterprise-2.14.5-1 when Buoyant Cloud is
installed. View all supported versions for this release.metrics.debugMetrics to enable sending additional debug
metrics to Buoyant.buoyant-cloud-metrics to v0.35.4.buoyant-cloud-metrics could consume excessive memory
when the Linkerd Destination controller exported many server_port_subscribes
metrics.linkerd namespace.linkerd-control-plane-operator now that requires Linkerd’s Helm releases
conform to the default linkerd-crds and linkerd-control-plane names. Users
with non-default Helm release names may run
linkerd-buoyant controlplane migrate-helm-release to migrate.linkerd-control-plane-operator to support up to edge-23.10.3,
stable-2.14.1, and enterprise-2.14.1-2ControlPlane Custom Resources via ArgoCD.controlPlaneOperator.extendedRBAC.enabled, default
changed from true to false. This flag should only be enabled for clusters
with Linkerd 2.12 or below.linkerd.namespace, linkerdJaeger.namespace, and
linkerdMulticluster.namespace--enable-pprof debug flag, defaulted to false, on
buoyant-cloud-agent, linkerd-control-plane-operator, and
linkerd-data-plane-operatorbuoyant-cloud-agent to send TLS certs from webhook secretsbuoyant-cloud to
linkerd-buoyant namespace. Please follow these
one-time migration instructions.linkerd-control-plane-operator to support up to edge-23.9.4,
stable-2.13.7, and enterprise-2.13.6-2linkerd-buoyant migrate-helm-release CLI subcommand, to aide in
migration to a Managed Linkerd installation.enterprise-2.13.6-1controlPlaneOperator.helmDockerConfigJSONSecret, for
Buoyant enterprise registry accessbuoyantCloudEnabled, default true . When set to false,
disable buoyant-cloud-agent, buoyant-cloud-metrics, all communication with
Buoyant Cloudlinkerd-buoyant CLI where it may fail to read
KUBECONFIGlinkerd-control-plane-operator to support up to stable-2.13.6 and
edge-23.8.3linkerd-control-plane-operator to require a controlPlaneConfig
field on all ControlPlane Custom Resources. This ensures the ControlPlane
CR is the ground source of truth for the Linkerd installation. This is a
breaking change and will require modifying existing ControlPlane Custom
Resources.linkerd-control-plane-validator component, to validate
ControlPlane Custom Resources are well-formed.linkerd-buoyant controlplane import-helm-config CLI command, to
assist in migrating from an existing Helm or ControlPlane -based Linkerd
installation to a new ControlPlane CR with a controlPlaneConfig field.resources Helm config fields to support configuring memory and CPU
requests and limitslinkerd-control-plane-operator to disallow skipping major versions
during upgrades and downgradeslinkerd-control-plane-operator to support up to edge-23.7.2HTTPRoute resources from the Gateway
APIHTTPRoute resources
from LinkerdstartupProbe
Helm valuesyncTimeout Helm value — useful for installing the agent on large clusterslogFormat Helm valuelinkerd-control-plane-operator to support up to edge-23.6.3 and
stable-2.13.5buoyant-cloud-metrics to start collecting outbound TCP write metricslinkerd-data-plane-operator to work with Argo RolloutsHTTPRoute resources to support all versions
up to v1beta3linkerd-control-plane-operator to support up to edge-23.5.3 and
stable-2.13.3linkerd-control-plane-operator to support up to edge-23.4.3 and
stable-2.12.5linkerd-control-plane-operator RBAC failure when Linkerd was installed
with PodMonitor--no-tls flag from the install commandlinkerd-data-plane-operator to work with custom Linkerd proxysecurityContext on initContainers in buoyant-cloud-agent and
buoyant-cloud-metricslinkerd-data-plane-operatoraffinityimagePullSecretslimit and requesttolerationspriorityClassName (buoyant-cloud-metrics only)linkerd-control-plane-operator to support up to edge-23.3.2 and
stable-2.12.4buoyant-cloud-agentcontrolPlaneOperator.enabled : Enable/disable
linkerd-control-plane-operatordataPlaneOperator.enabled : Enable/disable linkerd-data-plane-operatorfreeTier : Install the agent with limited free-tier featuresmanaged : Enable/disable managed features. Deprecated in favor of
controlPlaneOperator.enabled and dataPlaneOperator.enabledlinkerd-control-plane-operator to support up to edge-23.3.1 and
stable-2.12.4linkerd-data-plane-operatorlinkerd-control-plane-operator to support up to edge-22.12.1 and
stable-2.12.4linkerd-control-plane-operator failing to upgrade the Linkerd control
plane if a SelfSubjectRulesReview check encountered an authorizer on the
cluster that did not support rules evaluationbuoyant-cloud-metrics-agent to collect and send Linkerd control
plane metrics to Buoyant Cloudbuoyant-cloud-agent to send Pod updates if the status of any
container in the pod changes. This allows tracking the full lifecycle of
containers.ghcr.io/buoyantioghcr.io/buoyantio/linkerd-buoyant from
debian:bullseye-20221024-slim base image to scratchbuoyant-cloud-metrics-agent base Docker image to resolve OpenSSL
vulnerabilities
CVE-2022-3602 and
CVE-2022-3786. While the
vulnerable version of OpenSSL was not used by the running container, its
inclusion in the base image was being reported by security scanners
nonetheless. This has been fixed.linkerd-control-plane-operator to support up to edge-22.12.1 and
stable-2.12.2linkerd-control-plane-operator and linkerd-data-plane-operator to
emit Kubernetes events, and updated buoyant-cloud-agent to send these events
to Buoyant Cloudlinkerd-control-plane-operator to support edge-22.10.1,
edge-22.10.2, and stable-2.12.2buoyant-cloud-agent not collecting trust root information from some
Linkerd control plane componentslinkerd-control-plane-operator unnecessarily toggling between
Updating and Pending statesstable-2.11.5, stable-2.12.0,
and edge-22.9.2linkerd-buoyant check command to verify CRD existenceControlPlane custom resources with an empty
status fieldHTTPRoute gathering for Buoyant Cloudbuoyant-cloud-org-credentials secretlinkerd-buoyant check to validate linkerd-control-plane-operator
and linkerd-data-plane-operator workloadslinkerd-buoyant check to warn rather than fail on missing labels on
the buoyant-cloud-org-credentials secretbuoyant-cloud-org-credentials
secretstable-2.12.0managed : trueextendedRBAC.enabled : truestable-2.12.0-rc2ControlPlane and DataPlane
resources that previously existed on your clusteredge-22.8.2ControlPlane CRD’s lastUpdateAttempt and lastUpdateAttemptMessage
fields not always updatingstable-2.11.4 and edge-22.7.3edge-22.6.2edge-22.6.1edge-22.5.2 and edge-22.5.3ControlPlaneUpdate => ControlPlaneDataPlaneUpdate => DataPlanestable-2.10.x => edge upgrade pathsstable-2.10.xedge-22.5.1