## stable-2.12.1
This release includes several control plane and proxy fixes for `stable-2.12.0`.
In particular, it fixes issues related to control plane HTTP servers' header
read timeouts resulting in decreased controller success rates, lowers the
inbound connection pool idle timeout in the proxy, and fixes an issue where the
jaeger injector would put pods into an error state when upgrading from
stable-2.11.x.
Additionally, this release adds the `linkerd.io/trust-root-sha256` annotation to
all injected workloads allowing predictable comparison of all workloads' trust
anchors via the Kubernetes API.
For Windows users, note that the Linkerd CLI's `nupkg` file for Chocolatey is
once again included in the release assets (it was previously removed in
stable-2.10.0).
* Proxy
* Lowered inbound connection pool idle timeout to 3s
* Control Plane
* Updated AdmissionRegistration API version usage to v1
* Added `linkerd.io/trust-root-sha256` annotation on all injected workloads
to indicate certifcate bundle
* Updated fields in `AuthorizationPolicy` and `MeshTLSAuthentication` to
conform to specification (thanks @aatarasoff!)
* Updated the identity controller to not require a `ClusterRoleBinding`
to read all deployment resources
* Increased servers' header read timeouts so they no longer match default
probe and Prometheus scrape intervals
* Helm
* Restored `namespace` field in Linkerd helm charts
* Updated `PodDisruptionBudget` `apiVersion` from `policy/v1beta1` to
`policy/v1` (thanks @Vrx555!)
* Extensions
* Fixed jaeger injector interfering with upgrades to 2.12.x