instruction: How do you deploy and configure Linkerd service mesh?
output: Tasks | Linkerd Docs Community Get Involved Adopters & Case Studies Linkerd Ambassadors Become an Ambassador Buoyant's Linkerd Forum Blog FAQ Enterprise Star Join Forum Announcing Linkerd 2.18: Battlescars, lessons learned, and preliminary Windows support Learn more You are viewing docs for an older version of Linkerd. You may want the latest documentation for this page instead. Linkerd edge Linkerd 2.18 Linkerd 2.17 Linkerd 2.16 Linkerd 2.15 Linkerd 2.14 Linkerd 2.13 Linkerd 2.12 Linkerd 2.11 Linkerd 2.10 Overview Getting Started Features HTTP, HTTP/2, and gRPC Proxying TCP Proxying and Protocol Detection Retries and Timeouts Automatic mTLS Ingress Telemetry and Monitoring Load Balancing Authorization Policy Automatic Proxy Injection CNI Plugin Dashboard and on-cluster metrics stack Distributed Tracing Fault Injection High Availability HTTP Access Logging Multi-cluster communication Proxy Init Iptables Modes Service Profiles Topology Aware Routing Traffic Split (canaries, blue/green deploys) Tasks Adding your services to Linkerd Automated Canary Releases Automatic Multicluster Failover Automatically Rotating Control Plane TLS Credentials Automatically Rotating Webhook TLS Credentials Bringing your own Prometheus Configuring Per-Route Policy Configuring Proxy Concurrency Configuring Retries Configuring Timeouts Control Plane Debug Endpoints Customizing Linkerd's Configuration with Kustomize Debugging 502s Debugging gRPC applications with request tracing Debugging HTTP applications with per-route metrics Distributed tracing with Linkerd Enabling Topology Aware Routing Exporting Metrics Exposing the Dashboard Generating your own mTLS root certificates Getting Per-Route Metrics Getting started with Linkerd SMI extension Graceful Pod Shutdown Grafana Ingress traffic Injecting Faults Installing Linkerd Installing Linkerd with Helm Installing Multi-cluster Components Linkerd and Pod Security Policies (PSP) Manually Rotating Control Plane TLS Credentials Modifying the Proxy Log Level Multi-cluster communication Multi-cluster communication with StatefulSets Replacing expired certificates Restricting Access To Services Rotating webhooks certificates Securing Linkerd Tap Setting Up Service Profiles Troubleshooting Uninstalling Linkerd Uninstalling Multicluster Upgrading Linkerd Using a Custom Cluster Domain Using A Private Docker Repository Using extensions Using GitOps with Linkerd with Argo CD Using the Debug Sidecar Validating your mTLS traffic Reference Architecture Authorization Policy CLI authz check completion diagnostics identity inject install install-cni jaeger multicluster profile uninject uninstall upgrade version viz Cluster Configuration Extensions List Helm Chart Version Matrix IPTables Reference Proxy Configuration Proxy Log Level Proxy Metrics Service Profiles What is a service mesh? Frequently Asked Questions Releases and Versions Design Principles Going to Production Service Mesh Glossary Tasks As a complement to the Linkerd feature docs and the Linkerd reference docs , we&rsquo;ve provided guides and examples of common tasks that you may need to perform when using Linkerd. Common Linkerd tasks Adding your services to Linkerd In order for your services to take advantage of Linkerd, they also need to be meshed by injecting Linkerd's data plane proxy into their pods. Automated Canary Releases Reduce deployment risk by combining Linkerd and Flagger to automate canary releases based on service metrics. Automatic Multicluster Failover Use the Linkerd Failover extension to failover between clusters. Automatically Rotating Control Plane TLS Credentials Use cert-manager to automatically rotate control plane TLS credentials. Automatically Rotating Webhook TLS Credentials Use cert-manager to automatically rotate webhook TLS credentials. Bringing your own Prometheus Use an existing Prometheus instance with Linkerd. Configuring Per-Route Policy Fine-grained authorization policies can be configured for individual HTTP routes. Configuring Proxy Concurrency Limit the Linkerd proxy's CPU usage. Configuring Retries Configure Linkerd to automatically retry failing requests. Configuring Timeouts Configure Linkerd to automatically fail requests that take too long. Control Plane Debug Endpoints Linkerd's control plane components provide debug endpoints. Customizing Linkerd's Configuration with Kustomize Use Kustomize to modify Linkerd's configuration in a programmatic way. Debugging 502s Determine why Linkerd is returning 502 responses. Debugging gRPC applications with request tracing Follow a long-form example of debugging a failing gRPC application using live request tracing. Debugging HTTP applications with per-route metrics Follow a long-form example of debugging a failing HTTP application using per-route metrics. Distributed tracing with Linkerd Use Linkerd to help instrument your application with distributed tracing. Enabling Topology Aware Routing Enable topology aware routing to allow Linkerd to intelligently choose same-zone endpoints Exporting Metrics Integrate Linkerd's metrics with your existing metrics infrastructure. Exposing the Dashboard Make it easy for others to access Linkerd and Grafana dashboards without the CLI. Generating your own mTLS root certificates Generate your own mTLS root certificate instead of letting Linkerd do it for you. Getting Per-Route Metrics Configure per-route metrics for your application. Getting started with Linkerd SMI extension Use Linkerd SMI extension to work with Service Mesh Interface(SMI) resources. Graceful Pod Shutdown Gracefully handle pod shutdown signal. Grafana Grafana install instructions and how to link it with the Linkerd Dashboard Ingress traffic Linkerd works alongside your ingress controller of choice. Injecting Faults Practice chaos engineering by injecting faults into services with Linkerd. Installing Linkerd Install Linkerd onto your Kubernetes cluster. Installing Linkerd with Helm Install Linkerd onto your Kubernetes cluster using Helm. Installing Multi-cluster Components Allow Linkerd to manage cross-cluster communication. Linkerd and Pod Security Policies (PSP) Using Linkerd with a pod security policies enabled. Manually Rotating Control Plane TLS Credentials Update Linkerd's TLS trust anchor and issuer certificate. Modifying the Proxy Log Level Linkerd proxy log levels can be modified dynamically to assist with debugging. Multi-cluster communication Allow Linkerd to manage cross-cluster communication. Multi-cluster communication with StatefulSets cross-cluster communication to and from headless services. Replacing expired certificates Follow this workflow if any of your TLS certs have expired. Restricting Access To Services Use Linkerd policy to restrict access to a service. Rotating webhooks certificates Follow these steps to rotate your Linkerd webhooks certificates. Securing Linkerd Tap Best practices for securing Linkerd's tap feature. Setting Up Service Profiles Create a service profile that provides more details for Linkerd to build on. Troubleshooting Troubleshoot issues with your Linkerd installation. Uninstalling Linkerd Linkerd can be easily removed from a Kubernetes cluster. Uninstalling Multicluster Unlink and uninstall Linkerd multicluster. Upgrading Linkerd Perform zero-downtime upgrades for Linkerd. Using a Custom Cluster Domain Use Linkerd with a custom cluster domain. Using A Private Docker Repository Using Linkerd with a Private Docker Repository. Using extensions Add functionality to Linkerd with optional extensions. Using GitOps with Linkerd with Argo CD Use Argo CD to manage Linkerd installation and upgrade lifecycle. Using the Debug Sidecar Inject the debug container to capture network packets. Validating your mTLS traffic You can validate whether or not your traffic is being mTLS'd by Linkerd. Linkerd was originally created by Buoyant View Code of Conduct Community GitHub Slack Linkerd Forum Follow Linkedin YouTube Twitter Edit This Site Copyright © 2025 Linkerd Authors. All rights reserved.