From 14cf6d6ea10423b12809d868eb574a9a610916f9 Mon Sep 17 00:00:00 2001 From: Casey Davenport Date: Thu, 14 Apr 2022 09:06:47 -0700 Subject: [PATCH] Updates for v3.22.2 --- calico/_data/versions.yml | 29 +++++++++++++++++++ .../release-notes/v3.22.2-release-notes.md | 11 +++++++ 2 files changed, 40 insertions(+) create mode 100644 calico/_includes/release-notes/v3.22.2-release-notes.md diff --git a/calico/_data/versions.yml b/calico/_data/versions.yml index da512c3f98d..cc73ba9dbfc 100644 --- a/calico/_data/versions.yml +++ b/calico/_data/versions.yml @@ -1,3 +1,32 @@ +- title: v3.22.2 + tigera-operator: + image: tigera/operator + registry: quay.io + version: v1.25.7 + components: + typha: + version: v3.22.2 + calicoctl: + version: v3.22.2 + calico/node: + version: v3.22.2 + calico/cni: + version: v3.22.2 + calico/apiserver: + version: v3.22.2 + calico/kube-controllers: + version: v3.22.2 + calico/flannel-migration-controller: + version: v3.22.2 + networking-calico: + version: v3.22.2 + flannel: + version: v0.13.0 + calico/dikastes: + version: v3.22.2 + flexvol: + version: v3.22.2 + - title: v3.22.1 tigera-operator: image: tigera/operator diff --git a/calico/_includes/release-notes/v3.22.2-release-notes.md b/calico/_includes/release-notes/v3.22.2-release-notes.md new file mode 100644 index 00000000000..c856948f4cb --- /dev/null +++ b/calico/_includes/release-notes/v3.22.2-release-notes.md @@ -0,0 +1,11 @@ +14 Apr 2022 + +#### Bug fixes + + - Fix Get-IsDSRSupported command not found in Calico Windows install script [calico #5908](https://github.com/projectcalico/calico/pull/5908) (@lmm) + - Handle bootstrapping of Wireguard to ensure felix is able to connect to typha. This fixes a bug that is present when HostEncryptionEnabled is set to true (which is required for using wireguard with AKS). Previously, when nodes shared their wireguard public keys, depending on the order they keys were shared, it was possible to end up with asymmetric node-to- node routing. Packets will be dropped between impacted nodes. If the typha nodes are impacted then it is possible for other nodes to be effectively locked out from connecting to typha and the routing issue will persist. This will be apparent through persistent readiness checks failing on the node. [calico #5870](https://github.com/projectcalico/calico/pull/5870) (@robbrockbank) + - Add FelixConfiguration option for FloatingIPs [calico #5865](https://github.com/projectcalico/calico/pull/5865) (@caseydavenport) + - IPAM garbage collector properly releases IP addresses whose handles have been deleted [calico #5827](https://github.com/projectcalico/calico/pull/5827) (@caseydavenport) + - Build components with go 1.17.8 to pick up CVE fixes. [calico #5818](https://github.com/projectcalico/calico/pull/5818) (@doublek) + - eBPF mode: Fix that policy would see 0.0.0.0:0 as the post-nat destination for SYN packets that had a conntrack hit. [calico #5773](https://github.com/projectcalico/calico/pull/5773) (@fasaxc) + - Fix dynamic build of pod2daemon which resulted in cryptic "no such file or directory" errors [calico #5751](https://github.com/projectcalico/calico/pull/5751) (@caseydavenport)