linkerd | Old repo for Linkerd 1x See the linkerd2 repo for Linkerd 2x | Microservice library

We are using Linkerd 2.11.1 on Azure AKS Kubernetes. Amongst others there is a Deployment using using an Alpine Linux image containing Apache/mod_php/PHP8 serving an API. HTTPS is resolved by Traefik v2 with cert-manager, so that in coming traffic to the APIs is on port 80. The Linkerd proxy container is injected as a Sidecar.

Recently I saw that the API containers return 504 errors during a short period of time when doing a Rolling deployment. In the Sidecars log, I found the following :

I just tried to install Linkerd viz extension following official documentation but all the pods are in a crash loop.

I have configured linkerd with 2 clusters in GKE (west and east cluster) for multicluster purpose. I used this demo app provided by google https://github.com/GoogleCloudPlatform/microservices-demo

First I did it with Istio and everything worked out fine, but with linkerd its different. As expected the exported service from east to west cluster with get the cluster name appended to the service. eg in west cluster ,you will get currencyservice-east.

The problem I think I am having is that the frontend in the west cluster keeps sending request to currencyservice instead of currencyservice-east.

I didn't have this problem in Istio because Istio used the same service name across clusters. I am not a GO programmer, but I have googled my life to find out where the service name was defined in the frontend source code to change it but I have not succeeded.

another alternative will be for linkerd to maintain the service name while exporting it.

please guys help me.

I have been trying for days and countless hours to make this thing work with Traefik, however not matter what I have tried nothing has been working so far.

I have tried first with Nginx ingress controller and managed to make it work, so I am sure that my provider (Cognito) and the oauth2-proxy pod is working correctly.

So, I am using an EKS 1.20 cluster and we have Traefik installed via helm chart

I'm in the process of vetting a move to service mesh. While Istio and Consul Connect are certainly still in the cards, I'm leaning towards building up from a bit lower level with Linkerd and SPIFFE/SPIRE.

I want to build a 'hello world' mesh to test this architecture out. In this hello world mesh, I'd like to be able to issue certificates from SPIFFE/SPIRE that encode some kind of role. As you can probably tell, I'm new to service meshes. How would I implement roles? Are there any guides out there to help get me started?

I am using Kubernetes. I have two pods.

In one pod, it is running a server. Here is the part of codes trying to connect PostgreSQL service in another pod.

I can't seem to find a simple answer to my question,

how to use linkerd inject command / options to add when using helm to install a package, e.g. like postgres?

I have done it with another package but that was by adding the annotation command to a values file and supplying that when running the helm install command.

With istio, all I have to do is to add a label on the namespace and it works?

So I started to look into adding the annotation to the namespaces I am working with, using the kubectl create namespace command?

However, I cant seem to find a way to add any annotation at the point of creating a namespace, unless I use a file.

So, I either need a way to add this annotation to the namespace with the create command or when installing packages with helm?

Thanks,

I'm trying to configure a canary rollout for a demo, but I'm having trouble getting the traffic splitting to work with linkerd. The funny part is I was able to get this working with istio and i find istio to be much more complicated then linkerd.

I have a basic go-lang service define like this:

Argo CD shows two items from linkerd (installed by Helm) are being out of sync. The warnings are caused by the optional preserveUnknownFields: false in the spec section:

trafficsplits.split.smi-spec.io

serviceprofiles.linkerd.io

But I'm not able to figure out how to ignore the difference using ignoreDifferences in the Application manifest. The /spec/preserveUnknownFields json path isn't working. Is it because the field preserveUnknownFields is not present in the left version?