# \#configuration

**URL:** https://linkerd.buoyant.io/tag/configuration/6.md

[Latest](https://linkerd.buoyant.io/latest.md) · [Categories](https://linkerd.buoyant.io/categories.md) · [Tags](https://linkerd.buoyant.io/tags.md)

---

## [Outbound calls failure](https://linkerd.buoyant.io/t/outbound-calls-failure/845)

<div class="topic-metadata">

**Author:** [@Darshan](https://linkerd.buoyant.io/u/Darshan)\
**Replies:** 2\
**Last updated:** [February 28, 2026, 7:25pm UTC](https://linkerd.buoyant.io/t/outbound-calls-failure/845 "2026-02-28T19:25:16Z")

</div>

Hi team, Recently we’ve started facing issue with outbound calls for many pods when trying to connect with services within same cluster. Proxy was OOM killed and we fixed it, we restarted Linkerd control plane components…

---

## [Adding support for HTTP Local Concurrency Limit Policy similar to HTTP Local Rate Limit Policy](https://linkerd.buoyant.io/t/adding-support-for-http-local-concurrency-limit-policy-similar-to-http-local-rate-limit-policy/846)

<div class="topic-metadata">

**Author:** [@himanshu.garg.zepto](https://linkerd.buoyant.io/u/himanshu.garg.zepto)\
**Replies:** 0\
**Last updated:** [February 26, 2026, 7:25am UTC](https://linkerd.buoyant.io/t/adding-support-for-http-local-concurrency-limit-policy-similar-to-http-local-rate-limit-policy/846 "2026-02-26T07:25:24Z")

</div>

I need help with adding support for HTTPLocalConcurrencyLimitPolicy similar to HTTPLocalRateLimitPolicy Essentially, a policy to limit number of concurrent requests to the service container to protect it from overload N…

---

## [How to change a value with Linkerd CLI?](https://linkerd.buoyant.io/t/how-to-change-a-value-with-linkerd-cli/810)

<div class="topic-metadata">

**Author:** [@MewanthaB](https://linkerd.buoyant.io/u/MewanthaB)\
**Replies:** 1\
**Last updated:** [February 8, 2026, 2:23pm UTC](https://linkerd.buoyant.io/t/how-to-change-a-value-with-linkerd-cli/810 "2026-02-08T14:23:19Z")

</div>

According to the Linkerd doc: Authority Label For metrics with the direction=inbound label value, the authority label is omitted. This is done as a security measure to prevent malicious clients from being able to cause…

---

## [Does Linkerd support slow start load balancing?](https://linkerd.buoyant.io/t/does-linkerd-support-slow-start-load-balancing/805)

<div class="topic-metadata">

**Author:** [@aidenlim](https://linkerd.buoyant.io/u/aidenlim)\
**Replies:** 1\
**Last updated:** [February 4, 2026, 11:26pm UTC](https://linkerd.buoyant.io/t/does-linkerd-support-slow-start-load-balancing/805 "2026-02-04T23:26:17Z")

</div>

Hello I’m evaluating load balancing behavior in service meshes and came across Envoy’s slow start mode, which progressively ramps up traffic to newly added endpoints. This is particularly useful for cases like Kubernete…

---

## [linkerd-Identity-Issuer not refreshing certificates as expected](https://linkerd.buoyant.io/t/linkerd-identity-issuer-not-refreshing-certificates-as-expected/811)

<div class="topic-metadata">

**Author:** [@Shubham](https://linkerd.buoyant.io/u/Shubham)\
**Replies:** 5\
**Last updated:** [January 8, 2026, 4:13pm UTC](https://linkerd.buoyant.io/t/linkerd-identity-issuer-not-refreshing-certificates-as-expected/811 "2026-01-08T16:13:46Z")

</div>

Recently we’ve started facing issue with outbound calls for some pods when trying to connect with services within same cluster. Can see following logs in proxy \[9515905.481616s\] WARN ThreadId(01) outbound:proxy{addr=1…

---

## [Linkerd and k8s service session affinity](https://linkerd.buoyant.io/t/linkerd-and-k8s-service-session-affinity/836)

<div class="topic-metadata">

**Author:** [@chri4774](https://linkerd.buoyant.io/u/chri4774)\
**Replies:** 0\
**Last updated:** [December 17, 2025, 3:34pm UTC](https://linkerd.buoyant.io/t/linkerd-and-k8s-service-session-affinity/836 "2025-12-17T15:34:57Z")

</div>

Hello, Some of our applications rely on service session affinity when communicating with other applications in the cluster. (See Virtual IPs and Service Proxies | Kubernetes ) As I understand it, when the Linkerd proxy…

---

## [Linkerd-Viz Tap FailedDiscoveryCheck while Running on EKS](https://linkerd.buoyant.io/t/linkerd-viz-tap-faileddiscoverycheck-while-running-on-eks/252)

<div class="topic-metadata">

**Author:** [@yourbromike](https://linkerd.buoyant.io/u/yourbromike)\
**Replies:** 3\
**Last updated:** [December 8, 2025, 3:21pm UTC](https://linkerd.buoyant.io/t/linkerd-viz-tap-faileddiscoverycheck-while-running-on-eks/252 "2025-12-08T15:21:36Z")

</div>

I wanted to post some information here in case someone runs into this issue with Linkerd in the future and are running on EKS. Specifically those running the Terraform EKS Module. ‼ tap API service is running Failed…

---

## [Linkerd-enterprise-windows-cni helm chart does not support tolerations](https://linkerd.buoyant.io/t/linkerd-enterprise-windows-cni-helm-chart-does-not-support-tolerations/827)

<div class="topic-metadata">

**Author:** [@Jan](https://linkerd.buoyant.io/u/Jan)\
**Replies:** 10\
**Last updated:** [November 25, 2025, 7:50am UTC](https://linkerd.buoyant.io/t/linkerd-enterprise-windows-cni-helm-chart-does-not-support-tolerations/827 "2025-11-25T07:50:21Z")

</div>

The linkerd-enterprise-windows-cni helm chart does not support tolerations. The normal use-case as I see it is to install this on the Windows nodes in a k8s cluster that has both Linux and Windows nodes. The normal patte…

---

## [Linkerd does not start when using Cert Manager and Trust manager to rotate the MTLS certs](https://linkerd.buoyant.io/t/linkerd-does-not-start-when-using-cert-manager-and-trust-manager-to-rotate-the-mtls-certs/825)

<div class="topic-metadata">

**Author:** [@Nikolayy1](https://linkerd.buoyant.io/u/Nikolayy1)\
**Replies:** 0\
**Last updated:** [November 14, 2025, 9:38am UTC](https://linkerd.buoyant.io/t/linkerd-does-not-start-when-using-cert-manager-and-trust-manager-to-rotate-the-mtls-certs/825 "2025-11-14T09:38:22Z")

</div>

Followed article Automatically Rotating Control Plane TLS Credentials | Linkerd but linkerd did not start because of config error. kubectl get pods -A -o wide linkerd linkerd-destination-768cc5bd8c-dxhs5 …

---

## [Linkerd support for Postgresql database connectivity](https://linkerd.buoyant.io/t/linkerd-support-for-postgresql-database-connectivity/824)

<div class="topic-metadata">

**Author:** [@Anindya227](https://linkerd.buoyant.io/u/Anindya227)\
**Replies:** 1\
**Last updated:** [November 6, 2025, 2:14pm UTC](https://linkerd.buoyant.io/t/linkerd-support-for-postgresql-database-connectivity/824 "2025-11-06T14:14:50Z")

</div>

Hi, I would like to know if linkerd supports connectivity to postgresql database. I will be using crunchy postgres operator to create pg-clusters(db services). And i want to connect to the db via psql client. I would…

---

## [Custom headers being stripped before reaching application - is this expected?](https://linkerd.buoyant.io/t/custom-headers-being-stripped-before-reaching-application-is-this-expected/821)

<div class="topic-metadata">

**Author:** [@JonathanGill](https://linkerd.buoyant.io/u/JonathanGill)\
**Replies:** 3\
**Last updated:** [November 3, 2025, 9:23am UTC](https://linkerd.buoyant.io/t/custom-headers-being-stripped-before-reaching-application-is-this-expected/821 "2025-11-03T09:23:02Z")

</div>

I’ve been debugging why custom HTTP headers aren’t reaching our application in a Linkerd-injected environment, and I’ve narrowed it down to the proxy layer. I’m wondering if this is expected behavior or if there’s a conf…

---

## [Support Round Robin Algorithim](https://linkerd.buoyant.io/t/support-round-robin-algorithim/817)

<div class="topic-metadata">

**Author:** [@Srijan](https://linkerd.buoyant.io/u/Srijan)\
**Replies:** 0\
**Last updated:** [October 24, 2025, 9:05am UTC](https://linkerd.buoyant.io/t/support-round-robin-algorithim/817 "2025-10-24T09:05:40Z")

</div>

Hey team, I want to know how I can configure Linkerd to use Round Robin Algorithm. Due to EWMA algorithm there is an uneven traffic distribution happening among the pods ..leading to high resource utilisation etc. I…

---

## [Installation of linkerd through powershell](https://linkerd.buoyant.io/t/installation-of-linkerd-through-powershell/816)

<div class="topic-metadata">

**Author:** [@ikku\_55](https://linkerd.buoyant.io/u/ikku_55)\
**Replies:** 0\
**Last updated:** [October 20, 2025, 6:23pm UTC](https://linkerd.buoyant.io/t/installation-of-linkerd-through-powershell/816 "2025-10-20T18:23:26Z")

</div>

Whenver I try to configure Linkerd on on powershell it gives me error to create environment variable while I tried almost every solution available on internet but its not working?

---

## [Clarification on outbound-transport-mode](https://linkerd.buoyant.io/t/clarification-on-outbound-transport-mode/768)

<div class="topic-metadata">

**Author:** [@chri4774](https://linkerd.buoyant.io/u/chri4774)\
**Replies:** 4\
**Last updated:** [October 13, 2025, 3:20pm UTC](https://linkerd.buoyant.io/t/clarification-on-outbound-transport-mode/768 "2025-10-13T15:20:13Z")

</div>

Hello, with edge release 25.3.2 linkerd changed the default for outbound-transport-mode to transport-header, which will result in all traffic between meshed proxies flowing on port 4143, rather than using the original d…

---

## [Linkerd pods failing readiness/liveness probes intermittently in GKE cluster](https://linkerd.buoyant.io/t/linkerd-pods-failing-readiness-liveness-probes-intermittently-in-gke-cluster/807)

<div class="topic-metadata">

**Author:** [@Akshay](https://linkerd.buoyant.io/u/Akshay)\
**Replies:** 1\
**Last updated:** [September 4, 2025, 12:07pm UTC](https://linkerd.buoyant.io/t/linkerd-pods-failing-readiness-liveness-probes-intermittently-in-gke-cluster/807 "2025-09-04T12:07:21Z")

</div>

We are observing intermittent readiness and liveness probe failures for Linkerd pods (specially Linkerd-destination pod)of the gke cluster. These failures result in pod restarts due to liveness probe timeouts.The Kuberne…

---

## [AuthorizationPolicy does not appear to work with gateway HTTPRoute's](https://linkerd.buoyant.io/t/authorizationpolicy-does-not-appear-to-work-with-gateway-httproutes/801)

<div class="topic-metadata">

**Author:** [@depopry](https://linkerd.buoyant.io/u/depopry)\
**Replies:** 1\
**Last updated:** [August 20, 2025, 5:35pm UTC](https://linkerd.buoyant.io/t/authorizationpolicy-does-not-appear-to-work-with-gateway-httproutes/801 "2025-08-20T17:35:57Z")

</div>

Linkerd states that both policy.linkerd.io and gateway.networking.k8s.io HTTPRoutes can be used under the AuthorizationPolicy documentation. We have a working configuration for policy.linkerd.io\`\` HTTPRoute, but not gat…

---

## [Deny 1 route in an application with many HTTP endpoints?](https://linkerd.buoyant.io/t/deny-1-route-in-an-application-with-many-http-endpoints/253)

<div class="topic-metadata">

**Author:** [@kzap](https://linkerd.buoyant.io/u/kzap)\
**Replies:** 5\
**Last updated:** [August 13, 2025, 9:52am UTC](https://linkerd.buoyant.io/t/deny-1-route-in-an-application-with-many-http-endpoints/253 "2025-08-13T09:52:23Z")

</div>

As of Linkerd 2.14, when I specify AuthorizationPolicy on a HTTPRoute it automatically makes all unspecified routes deny? I remember this from one of the workshops https://www.youtube.com/watch?v=hzj65jVtEwc Thus if I j…

---

## [Services cannot talk to mirrored services](https://linkerd.buoyant.io/t/services-cannot-talk-to-mirrored-services/787)

<div class="topic-metadata">

**Author:** [@FormalR2D2Tech](https://linkerd.buoyant.io/u/FormalR2D2Tech)\
**Replies:** 4\
**Last updated:** [July 15, 2025, 5:13pm UTC](https://linkerd.buoyant.io/t/services-cannot-talk-to-mirrored-services/787 "2025-07-15T17:13:49Z")

</div>

Hi, new to Linkerd so I need some extra explanations. Currently, I am trying to set up 2 clusters that can talk to each other to run some experiments. The idea is given the sock-shop/ hotel reservation microservice apps…

---

## [Linkerd, RKE2 CIS profile - securityContext](https://linkerd.buoyant.io/t/linkerd-rke2-cis-profile-securitycontext/780)

<div class="topic-metadata">

**Author:** [@raggeler](https://linkerd.buoyant.io/u/raggeler)\
**Replies:** 2\
**Last updated:** [June 27, 2025, 7:12pm UTC](https://linkerd.buoyant.io/t/linkerd-rke2-cis-profile-securitycontext/780 "2025-06-27T19:12:19Z")

</div>

Hi I am trying to get Linkerd working on an RKE2 CIS profile configured cluster. That means that everything is in a non-root environment and that most privilege access is denied. I have seen that the linkerd namespace …

---

## [Linkerd Cert Monitoring](https://linkerd.buoyant.io/t/linkerd-cert-monitoring/775)

<div class="topic-metadata">

**Author:** [@go4brendon](https://linkerd.buoyant.io/u/go4brendon)\
**Replies:** 4\
**Last updated:** [June 18, 2025, 11:38am UTC](https://linkerd.buoyant.io/t/linkerd-cert-monitoring/775 "2025-06-18T11:38:57Z")

</div>

Hi I recently joined a company who where using linkerd in production. Long story short and due to an issue with linkerd certs werent being renewed by cert-manager which caused a bunch of deployments to fall over after be…

---

## [Setting up fixed IP address for egress traffic with Linkerd](https://linkerd.buoyant.io/t/setting-up-fixed-ip-address-for-egress-traffic-with-linkerd/760)

<div class="topic-metadata">

**Author:** [@danivo](https://linkerd.buoyant.io/u/danivo)\
**Replies:** 1\
**Last updated:** [June 5, 2025, 3:28pm UTC](https://linkerd.buoyant.io/t/setting-up-fixed-ip-address-for-egress-traffic-with-linkerd/760 "2025-06-05T15:28:31Z")

</div>

Hello Linkerd community, I’m trying to implement a solution for using fixed IP addresses for egress traffic from specific applications in my Kubernetes cluster. I would appreciate any guidance on how to achieve this usi…

---

## [Nginx Ingress Can't enable Websocket](https://linkerd.buoyant.io/t/nginx-ingress-cant-enable-websocket/756)

<div class="topic-metadata">

**Author:** [@suryanarayanam](https://linkerd.buoyant.io/u/suryanarayanam)\
**Replies:** 2\
**Last updated:** [April 15, 2025, 8:36pm UTC](https://linkerd.buoyant.io/t/nginx-ingress-cant-enable-websocket/756 "2025-04-15T20:36:34Z")

</div>

Team - Linkerd version - edge-25.4.1 AKS Cluster Created namespace linkerd Installed linkerd CRDs from the helm chart \[kept the default values\] Installed Linkerd from the helm chart \[kept the default values\] with in …

---

## [Linkerd Multicluster Doubts](https://linkerd.buoyant.io/t/linkerd-multicluster-doubts/719)

<div class="topic-metadata">

**Author:** [@Shashank](https://linkerd.buoyant.io/u/Shashank)\
**Replies:** 1\
**Last updated:** [March 25, 2025, 10:52pm UTC](https://linkerd.buoyant.io/t/linkerd-multicluster-doubts/719 "2025-03-25T22:52:39Z")

</div>

Hi, I was going through the documentation of linkerd multicluster, and was planning to use this setup in our production clusters. Can anyone help with two quick questions Is linkerd gateway a single point of failure a…

---

## [Proxy killing traffic during shutdown in native sidecar mode](https://linkerd.buoyant.io/t/proxy-killing-traffic-during-shutdown-in-native-sidecar-mode/747)

<div class="topic-metadata">

**Author:** [@Randy](https://linkerd.buoyant.io/u/Randy)\
**Replies:** 0\
**Last updated:** [March 17, 2025, 5:22pm UTC](https://linkerd.buoyant.io/t/proxy-killing-traffic-during-shutdown-in-native-sidecar-mode/747 "2025-03-17T17:22:00Z")

</div>

Was wondering if someone has seen the same issue, We’re trying to use the native sidecar to help with some graceful shutdown scenarios hoping that the proxy would terminate after the main container, this seems to work w…

---

## [Linkerd mc link service not mirrored with different name of namespace](https://linkerd.buoyant.io/t/linkerd-mc-link-service-not-mirrored-with-different-name-of-namespace/705)

<div class="topic-metadata">

**Author:** [@Yassine](https://linkerd.buoyant.io/u/Yassine)\
**Replies:** 0\
**Last updated:** [January 29, 2025, 4:14pm UTC](https://linkerd.buoyant.io/t/linkerd-mc-link-service-not-mirrored-with-different-name-of-namespace/705 "2025-01-29T16:14:59Z")

</div>

I have two namespaces with different names and I followed the tutorial linkerd multi-cluster all steps are ok installation of linkerd and modules linkerd mc and linkerd viz, I also managed to establish a connection and m…

---

## [How to install BEL linkerd viz with Helm?](https://linkerd.buoyant.io/t/how-to-install-bel-linkerd-viz-with-helm/607)

<div class="topic-metadata">

**Author:** [@paymahn](https://linkerd.buoyant.io/u/paymahn)\
**Replies:** 1\
**Last updated:** [January 25, 2025, 6:16pm UTC](https://linkerd.buoyant.io/t/how-to-install-bel-linkerd-viz-with-helm/607 "2025-01-25T18:16:03Z")

</div>

How do I install BEL linkerd viz with Helm? The installation docs don’t say anything about extensions. The upgrade docs just say: If using Helm, the procedure is similar to the control plane upgrade, using the respecti…

---

## [Linkerd Destination and Proxy Injector forced Sync with ArgoCD](https://linkerd.buoyant.io/t/linkerd-destination-and-proxy-injector-forced-sync-with-argocd/686)

<div class="topic-metadata">

**Author:** [@matthew.duval](https://linkerd.buoyant.io/u/matthew.duval)\
**Replies:** 3\
**Last updated:** [January 23, 2025, 6:16pm UTC](https://linkerd.buoyant.io/t/linkerd-destination-and-proxy-injector-forced-sync-with-argocd/686 "2025-01-23T18:16:20Z")

</div>

I’m experiencing an issue with my linkerd installation via argocd continuously re-deploying the destination and proxy injector pods whenever any meshed application is synced. My ignore differences configuration is the f…

---

## [Destination failed to send profile update](https://linkerd.buoyant.io/t/destination-failed-to-send-profile-update/652)

<div class="topic-metadata">

**Author:** [@thradec](https://linkerd.buoyant.io/u/thradec)\
**Replies:** 1\
**Last updated:** [January 2, 2025, 3:13pm UTC](https://linkerd.buoyant.io/t/destination-failed-to-send-profile-update/652 "2025-01-02T15:13:39Z")

</div>

Hi all, we are struggling with upgrading linkerd in our cluster (from stable-2.14.1 to edge 24.10.5). The same upgrade procedure works fine on smaller clusters. But this cluster is relatively large (aws, k8s 1.29, 75 nod…

---

## [Having https end to end](https://linkerd.buoyant.io/t/having-https-end-to-end/414)

<div class="topic-metadata">

**Author:** [@Msaustral](https://linkerd.buoyant.io/u/Msaustral)\
**Replies:** 1\
**Last updated:** [January 2, 2025, 1:03am UTC](https://linkerd.buoyant.io/t/having-https-end-to-end/414 "2025-01-02T01:03:06Z")

</div>

Hi we have and app that has horizontal scaling by memory consumption, we want to change the scaling by traffic to have a better control over the scaling. Our app is a nginx with http2 and ssl (server side cloudflare) im…

---

## [Linkerd viz uninstall circumvents linkerd uninstall checks](https://linkerd.buoyant.io/t/linkerd-viz-uninstall-circumvents-linkerd-uninstall-checks/613)

<div class="topic-metadata">

**Author:** [@aydin7](https://linkerd.buoyant.io/u/aydin7)\
**Replies:** 1\
**Last updated:** [January 2, 2025, 12:58am UTC](https://linkerd.buoyant.io/t/linkerd-viz-uninstall-circumvents-linkerd-uninstall-checks/613 "2025-01-02T00:58:47Z")

</div>

Hello everybody, I have an RKE2 Kubernetes Cluster where I installed linkerd and linkerd-viz via the Helm Charts. 2 weeks ago the certificates expired, which I only noticed now after new pods failed to start. I first th…

[Next page](https://linkerd.buoyant.io/tag/configuration/6.md?match_all_tags=true&page=1&tags%5B%5D=configuration)
