Disable nativeSidecar for identity and increase startupProbeInitialDelaySeconds for inject and destination

Author: teejaded

charts/linkerd-control-plane/templates/destination.yaml

@@ -344,7 +344,7 @@ spec:
       - {{- include "partials.proxy-init" $tree | indent 8 | trimPrefix (repeat 7 " ") }}
       {{ end -}}
       {{- if $tree.Values.proxy.nativeSidecar }}
-        {{- $_ := set $tree.Values.proxy "startupProbeInitialDelaySeconds" 20 }}
+        {{- $_ := set $tree.Values.proxy "startupProbeInitialDelaySeconds" 35 }}
         {{- $_ := set $tree.Values.proxy "startupProbePeriodSeconds" 5 }}
         {{- $_ := set $tree.Values.proxy "startupProbeFailureThreshold" 20 }}
       - {{- include "partials.proxy" $tree | indent 8 | trimPrefix (repeat 7 " ") }}

charts/linkerd-control-plane/templates/identity.yaml

@@ -206,6 +206,7 @@ spec:
       {{- $_ := set $tree.Values.proxy "await" false }}
       {{- $_ := set $tree.Values.proxy "loadTrustBundleFromConfigMap" true }}
       {{- $_ := set $tree.Values.proxy "podInboundPorts" "8080,9990" }}
+      {{- $_ := set $tree.Values.proxy "nativeSidecar" false }}
       {{- /*
         The identity controller cannot discover policies, so we configure it with defaults that
         enforce TLS on the identity service.
@@ -215,9 +216,7 @@ spec:
       {{- $_ := set $tree.Values.proxy "capabilities" (dict "drop" (list "ALL")) }}
       {{- $_ := set $tree.Values.proxy "outboundDiscoveryCacheUnusedTimeout" "5s" }}
       {{- $_ := set $tree.Values.proxy "inboundDiscoveryCacheUnusedTimeout" "90s" }}
-      {{- if not $tree.Values.proxy.nativeSidecar }}
       - {{- include "partials.proxy" $tree | indent 8 | trimPrefix (repeat 7 " ") }}
-      {{- end }}
       initContainers:
       {{ if .Values.cniEnabled -}}
       - {{- include "partials.network-validator" $tree | indent 8 | trimPrefix (repeat 7 " ") }}
@@ -230,9 +229,6 @@ spec:
       {{- $_ := set $tree.Values.proxyInit "ignoreOutboundPorts" .Values.proxyInit.kubeAPIServerPorts -}}
       - {{- include "partials.proxy-init" $tree | indent 8 | trimPrefix (repeat 7 " ") }}
       {{ end -}}
-      {{- if $tree.Values.proxy.nativeSidecar }}
-      - {{- include "partials.proxy" $tree | indent 8 | trimPrefix (repeat 7 " ") }}
-      {{ end -}}
       {{- if .Values.priorityClassName -}}
       priorityClassName: {{ .Values.priorityClassName }}
       {{ end -}}

charts/linkerd-control-plane/templates/proxy-injector.yaml

@@ -130,7 +130,7 @@ spec:
       - {{- include "partials.proxy-init" $tree | indent 8 | trimPrefix (repeat 7 " ") }}
       {{ end -}}
       {{- if $tree.Values.proxy.nativeSidecar }}
-        {{- $_ := set $tree.Values.proxy "startupProbeInitialDelaySeconds" 20 }}
+        {{- $_ := set $tree.Values.proxy "startupProbeInitialDelaySeconds" 35 }}
         {{- $_ := set $tree.Values.proxy "startupProbePeriodSeconds" 5 }}
         {{- $_ := set $tree.Values.proxy "startupProbeFailureThreshold" 20 }}
       - {{- include "partials.proxy" $tree | indent 8 | trimPrefix (repeat 7 " ") }}