1kubernetes-api
2--------------
3√ can initialize the client
4√ can query the Kubernetes API
5
6kubernetes-version
7------------------
8√ is running the minimum Kubernetes API version
9
10linkerd-existence
11-----------------
12√ 'linkerd-config' config map exists
13√ heartbeat ServiceAccount exist
14√ control plane replica sets are ready
15√ no unschedulable pods
16√ control plane pods are ready
17√ cluster networks contains all node podCIDRs
18√ cluster networks contains all pods
19√ cluster networks contains all services
20
21linkerd-config
22--------------
23√ control plane Namespace exists
24√ control plane ClusterRoles exist
25√ control plane ClusterRoleBindings exist
26√ control plane ServiceAccounts exist
27√ control plane CustomResourceDefinitions exist
28√ control plane MutatingWebhookConfigurations exist
29√ control plane ValidatingWebhookConfigurations exist
30√ proxy-init container runs as root user if docker container runtime is used
31
32linkerd-identity
33----------------
34√ certificate config is valid
35√ trust anchors are using supported crypto algorithm
36√ trust anchors are within their validity period
37√ trust anchors are valid for at least 60 days
38√ issuer cert is using supported crypto algorithm
39√ issuer cert is within its validity period
40√ issuer cert is valid for at least 60 days
41√ issuer cert is issued by the trust anchor
42
43linkerd-webhooks-and-apisvc-tls
44-------------------------------
45√ proxy-injector webhook has valid cert
46√ proxy-injector cert is valid for at least 60 days
47√ sp-validator webhook has valid cert
48√ sp-validator cert is valid for at least 60 days
49√ policy-validator webhook has valid cert
50√ policy-validator cert is valid for at least 60 days
51
52linkerd-identity-data-plane
53---------------------------
54√ data plane proxies certificate match CA
55
56linkerd-version
57---------------
58√ can determine the latest version
59√ cli is up-to-date
60
61linkerd-control-plane-proxy
62---------------------------
63√ control plane proxies are healthy
64√ control plane proxies are up-to-date
65√ control plane proxies and cli versions match
66
67linkerd-data-plane
68------------------
69√ data plane namespace exists
70√ data plane proxies are ready
71√ data plane is up-to-date
72√ data plane and cli versions match
73√ data plane pod labels are configured correctly
74√ data plane service labels are configured correctly
75√ data plane service annotations are configured correctly
76√ opaque ports are properly annotated
View as plain text