Release notes for Edge-19.4.5
+## edge-19.4.5
+
+**Significant Update**
+
+As of this edge release the proxy injector component is always installed.
+To have the proxy injector inject a pod you still can manually add the
+`linkerd.io/inject: enable` annotation into the pod spec, or at the namespace
+level to have all your pods be injected by default.
+With this release the behaviour of the `linkerd inject` command changes, where
+the proxy sidecar container YAML is no longer included in its output by
+default, but instead it will just add the annotations to defer the injection to
+the proxy injector.
+For use cases that require the full injected YAML to be output, a new
+`--manual` flag has been added.
+
+Another important update is the introduction of install stages. You still have
+the old `linkerd install` command, but now it can be broken into
+`linkerd install config` which installs the resources that require
+cluster-level privileges, and `linkerd install control-plane` that continues
+with the resources that only require namespace-level privileges.
+This also applies to the `linkerd upgrade` command.
+
+* CLI
+ * **Breaking Change** Removed the `--proxy-auto-inject` flag, as the
+ proxy injector is now always installed
+ * **Breaking Change** Replaced the `--linkerd-version` flag with the
+ `--proxy-version` flag in the `linkerd install` and `linkerd upgrade`
+ commands, which allows setting the version for the injected proxy sidecar
+ image, without changing the image versions for the control plane
+ * Introduced install stages: `linkerd install config` and
+ `linkerd install control-plane`
+ * Introduced upgrade stages: `linkerd upgrade config` and
+ `linkerd upgrade control-plane`
+ * Introduced a new `--from-manifests` flag to `linkerd upgrade` allowing
+ manually feeding a previously saved output of `linkerd install` into the
+ command, instead of requiring a connection to the cluster to fetch the
+ config
+ * Introduced a new `--manual` flag to `linkerd inject` to output the proxy
+ sidecar container spec
+ * Introduced a new `--enable-debug-sidecar` option to `linkerd inject`, that
+ injects a debug sidecar to inspect traffic to and from the meshed pod
+ * Added a new check for unschedulable pods and PSP issues (thanks, @liquidslr!)
+ * Disabled the spinner in `linkerd check` when running without a TTY
+ * Ensured the ServiceAccount for the proxy injector is created before its
+ Deployment to avoid warnings when installing the proxy injector
+ (thanks, @dwj300!)
+
+* Controller
+ * Added Go pprof HTTP endpoints to all control plane components' admin
+ servers to better assist debugging efforts
+ * Fixed bug in the proxy injector, where sporadically the pod workload owner
+ wasn't properly determined, which would result in erroneous stats
+ * Added support for a new `config.linkerd.io/disable-identity` annotation to
+ opt out of identity for a specific pod
+
+* Web UI
+ * Added the Font Awesome stylesheet locally; this allows both Font Awesome
+ and Material-UI sidebar icons to display consistently with no/limited
+ internet access (thanks again, @liquidslr!)
+
+* Internal
+ * Known container errors were hidden in the integration tests; now they are
+ reported in the output, still without having the tests fail
+
## stable-2.3.0
This stable release introduces a new TLS-based service identity system into the
