This release adds the `linkerd.io/trust-root-sha256` annotation to all injected workloads allowing predictable comparison of all workloads' trust anchors via the Kubernetes API. Additionally, this release lowers the inbound connection pool idle timeout to 3s. This should help avoid socket errors, especially for Kubernetes probes. * Added `linkerd.io/trust-root-sha256` annotation on all injected workloads to indicate certifcate bundle * Lowered inbound connection pool idle timeout to 3s * Restored `namespace` field in Linkerd helm charts * Updated fields in `AuthorizationPolicy` and `MeshTLSAuthentication` to conform to specification (thanks @aatarasoff!) * Updated the identity controller to not require a `ClusterRoleBinding` to read all deployment resources.