From 6fc51cb3268e97b09dfeb5bd271ea1304ae413c0 Mon Sep 17 00:00:00 2001 From: Pedro Coutinho Date: Mon, 8 Jul 2024 13:10:23 -0700 Subject: [PATCH 1/2] Update manifests for release-v3.27 --- charts/calico/values.yaml | 2 +- charts/tigera-operator/values.yaml | 4 ++-- manifests/alp/istio-inject-configmap-1.1.0.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.1.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.10.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.11.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.12.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.13.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.14.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.15.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.16.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.17.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.2.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.3.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.4.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.5.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.6.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.7.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.8.yaml | 2 +- manifests/alp/istio-inject-configmap-1.1.9.yaml | 2 +- manifests/alp/istio-inject-configmap-1.10.yaml | 4 ++-- manifests/alp/istio-inject-configmap-1.15.yaml | 4 ++-- manifests/alp/istio-inject-configmap-1.2.0.yaml | 2 +- manifests/alp/istio-inject-configmap-1.2.1.yaml | 2 +- manifests/alp/istio-inject-configmap-1.2.2.yaml | 2 +- manifests/alp/istio-inject-configmap-1.2.3.yaml | 2 +- manifests/alp/istio-inject-configmap-1.2.4.yaml | 2 +- manifests/alp/istio-inject-configmap-1.2.5.yaml | 2 +- manifests/alp/istio-inject-configmap-1.2.6.yaml | 2 +- manifests/alp/istio-inject-configmap-1.2.7.yaml | 2 +- manifests/alp/istio-inject-configmap-1.2.8.yaml | 2 +- manifests/alp/istio-inject-configmap-1.2.9.yaml | 2 +- manifests/alp/istio-inject-configmap-1.3.0.yaml | 2 +- manifests/alp/istio-inject-configmap-1.3.1.yaml | 2 +- manifests/alp/istio-inject-configmap-1.3.2.yaml | 2 +- manifests/alp/istio-inject-configmap-1.3.3.yaml | 2 +- manifests/alp/istio-inject-configmap-1.3.4.yaml | 2 +- manifests/alp/istio-inject-configmap-1.3.5.yaml | 2 +- manifests/alp/istio-inject-configmap-1.4.0.yaml | 2 +- manifests/alp/istio-inject-configmap-1.4.1.yaml | 2 +- manifests/alp/istio-inject-configmap-1.4.2.yaml | 2 +- manifests/alp/istio-inject-configmap-1.6.yaml | 2 +- manifests/alp/istio-inject-configmap-1.7.yaml | 2 +- manifests/alp/istio-inject-configmap-1.9.yaml | 4 ++-- manifests/apiserver.yaml | 2 +- manifests/calico-bpf.yaml | 10 +++++----- manifests/calico-etcd.yaml | 8 ++++---- manifests/calico-policy-only.yaml | 10 +++++----- manifests/calico-typha.yaml | 12 ++++++------ manifests/calico-vxlan.yaml | 10 +++++----- manifests/calico.yaml | 10 +++++----- manifests/calicoctl-etcd.yaml | 4 ++-- manifests/calicoctl.yaml | 4 ++-- manifests/canal-etcd.yaml | 8 ++++---- manifests/canal.yaml | 8 ++++---- manifests/csi-driver.yaml | 4 ++-- manifests/flannel-migration/calico.yaml | 10 +++++----- manifests/ocp/02-tigera-operator.yaml | 6 +++--- manifests/tigera-operator.yaml | 4 ++-- 59 files changed, 103 insertions(+), 103 deletions(-) diff --git a/charts/calico/values.yaml b/charts/calico/values.yaml index 8d6e6350c26..28e204fbe89 100644 --- a/charts/calico/values.yaml +++ b/charts/calico/values.yaml @@ -1,5 +1,5 @@ # The Calico version to use when generating manifests. -version: v3.27.3 +version: v3.27.4 # Configure the images to use when generating manifests. node: diff --git a/charts/tigera-operator/values.yaml b/charts/tigera-operator/values.yaml index df43e5d43d7..bb50a653349 100644 --- a/charts/tigera-operator/values.yaml +++ b/charts/tigera-operator/values.yaml @@ -52,10 +52,10 @@ podLabels: {} # Image and registry configuration for the tigera/operator pod. tigeraOperator: image: tigera/operator - version: v1.32.7 + version: v1.32.10 registry: quay.io calicoctl: image: docker.io/calico/ctl - tag: v3.27.3 + tag: v3.27.4 kubeletVolumePluginPath: /var/lib/kubelet diff --git a/manifests/alp/istio-inject-configmap-1.1.0.yaml b/manifests/alp/istio-inject-configmap-1.1.0.yaml index 693959072b2..2ccca17eda1 100644 --- a/manifests/alp/istio-inject-configmap-1.1.0.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.0.yaml @@ -178,7 +178,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.1.yaml b/manifests/alp/istio-inject-configmap-1.1.1.yaml index 96535bdaae6..1a40f2becd6 100644 --- a/manifests/alp/istio-inject-configmap-1.1.1.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.1.yaml @@ -178,7 +178,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.10.yaml b/manifests/alp/istio-inject-configmap-1.1.10.yaml index eb21c52433d..42a8d502fc3 100644 --- a/manifests/alp/istio-inject-configmap-1.1.10.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.10.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.11.yaml b/manifests/alp/istio-inject-configmap-1.1.11.yaml index 84ada33231b..ccf63cec097 100644 --- a/manifests/alp/istio-inject-configmap-1.1.11.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.11.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.12.yaml b/manifests/alp/istio-inject-configmap-1.1.12.yaml index 121eed7cade..63dca0cfb81 100644 --- a/manifests/alp/istio-inject-configmap-1.1.12.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.12.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.13.yaml b/manifests/alp/istio-inject-configmap-1.1.13.yaml index 93bf95d78e7..f798dcdb592 100644 --- a/manifests/alp/istio-inject-configmap-1.1.13.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.13.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.14.yaml b/manifests/alp/istio-inject-configmap-1.1.14.yaml index 4de12d850d3..0dab95566b8 100644 --- a/manifests/alp/istio-inject-configmap-1.1.14.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.14.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.15.yaml b/manifests/alp/istio-inject-configmap-1.1.15.yaml index c9be31b8fdd..727c138c268 100644 --- a/manifests/alp/istio-inject-configmap-1.1.15.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.15.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.16.yaml b/manifests/alp/istio-inject-configmap-1.1.16.yaml index d4a4844dcc5..08a15c3259e 100644 --- a/manifests/alp/istio-inject-configmap-1.1.16.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.16.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.17.yaml b/manifests/alp/istio-inject-configmap-1.1.17.yaml index fcceced1ee5..888cfceaa09 100644 --- a/manifests/alp/istio-inject-configmap-1.1.17.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.17.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.2.yaml b/manifests/alp/istio-inject-configmap-1.1.2.yaml index b49ce1219f8..ff2eebcabb3 100644 --- a/manifests/alp/istio-inject-configmap-1.1.2.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.2.yaml @@ -178,7 +178,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.3.yaml b/manifests/alp/istio-inject-configmap-1.1.3.yaml index bd7d1967a33..73bf1a9896d 100644 --- a/manifests/alp/istio-inject-configmap-1.1.3.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.3.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.4.yaml b/manifests/alp/istio-inject-configmap-1.1.4.yaml index 130ab419243..31aebf66aa9 100644 --- a/manifests/alp/istio-inject-configmap-1.1.4.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.4.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.5.yaml b/manifests/alp/istio-inject-configmap-1.1.5.yaml index be583d61d57..f87d43f9670 100644 --- a/manifests/alp/istio-inject-configmap-1.1.5.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.5.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.6.yaml b/manifests/alp/istio-inject-configmap-1.1.6.yaml index a4758698d6c..9a488504bbd 100644 --- a/manifests/alp/istio-inject-configmap-1.1.6.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.6.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.7.yaml b/manifests/alp/istio-inject-configmap-1.1.7.yaml index 1c627308e12..9bf0e3404aa 100644 --- a/manifests/alp/istio-inject-configmap-1.1.7.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.7.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.8.yaml b/manifests/alp/istio-inject-configmap-1.1.8.yaml index 72b8ce71036..81164c80082 100644 --- a/manifests/alp/istio-inject-configmap-1.1.8.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.8.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.1.9.yaml b/manifests/alp/istio-inject-configmap-1.1.9.yaml index be0e8241c42..c032b351c7c 100644 --- a/manifests/alp/istio-inject-configmap-1.1.9.yaml +++ b/manifests/alp/istio-inject-configmap-1.1.9.yaml @@ -180,7 +180,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.10.yaml b/manifests/alp/istio-inject-configmap-1.10.yaml index 7f4577b133e..c7da3d41f98 100644 --- a/manifests/alp/istio-inject-configmap-1.10.yaml +++ b/manifests/alp/istio-inject-configmap-1.10.yaml @@ -433,7 +433,7 @@ data: name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false @@ -720,7 +720,7 @@ data: name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.15.yaml b/manifests/alp/istio-inject-configmap-1.15.yaml index 5cd3955a5e1..48e03b744c8 100644 --- a/manifests/alp/istio-inject-configmap-1.15.yaml +++ b/manifests/alp/istio-inject-configmap-1.15.yaml @@ -434,7 +434,7 @@ data: name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false @@ -719,7 +719,7 @@ data: name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.2.0.yaml b/manifests/alp/istio-inject-configmap-1.2.0.yaml index b43c0e1105c..ca3cfb64e50 100644 --- a/manifests/alp/istio-inject-configmap-1.2.0.yaml +++ b/manifests/alp/istio-inject-configmap-1.2.0.yaml @@ -301,7 +301,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.2.1.yaml b/manifests/alp/istio-inject-configmap-1.2.1.yaml index b43c0e1105c..ca3cfb64e50 100644 --- a/manifests/alp/istio-inject-configmap-1.2.1.yaml +++ b/manifests/alp/istio-inject-configmap-1.2.1.yaml @@ -301,7 +301,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.2.2.yaml b/manifests/alp/istio-inject-configmap-1.2.2.yaml index b43c0e1105c..ca3cfb64e50 100644 --- a/manifests/alp/istio-inject-configmap-1.2.2.yaml +++ b/manifests/alp/istio-inject-configmap-1.2.2.yaml @@ -301,7 +301,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.2.3.yaml b/manifests/alp/istio-inject-configmap-1.2.3.yaml index b43c0e1105c..ca3cfb64e50 100644 --- a/manifests/alp/istio-inject-configmap-1.2.3.yaml +++ b/manifests/alp/istio-inject-configmap-1.2.3.yaml @@ -301,7 +301,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.2.4.yaml b/manifests/alp/istio-inject-configmap-1.2.4.yaml index b43c0e1105c..ca3cfb64e50 100644 --- a/manifests/alp/istio-inject-configmap-1.2.4.yaml +++ b/manifests/alp/istio-inject-configmap-1.2.4.yaml @@ -301,7 +301,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.2.5.yaml b/manifests/alp/istio-inject-configmap-1.2.5.yaml index b43c0e1105c..ca3cfb64e50 100644 --- a/manifests/alp/istio-inject-configmap-1.2.5.yaml +++ b/manifests/alp/istio-inject-configmap-1.2.5.yaml @@ -301,7 +301,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.2.6.yaml b/manifests/alp/istio-inject-configmap-1.2.6.yaml index b43c0e1105c..ca3cfb64e50 100644 --- a/manifests/alp/istio-inject-configmap-1.2.6.yaml +++ b/manifests/alp/istio-inject-configmap-1.2.6.yaml @@ -301,7 +301,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.2.7.yaml b/manifests/alp/istio-inject-configmap-1.2.7.yaml index b43c0e1105c..ca3cfb64e50 100644 --- a/manifests/alp/istio-inject-configmap-1.2.7.yaml +++ b/manifests/alp/istio-inject-configmap-1.2.7.yaml @@ -301,7 +301,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.2.8.yaml b/manifests/alp/istio-inject-configmap-1.2.8.yaml index b43c0e1105c..ca3cfb64e50 100644 --- a/manifests/alp/istio-inject-configmap-1.2.8.yaml +++ b/manifests/alp/istio-inject-configmap-1.2.8.yaml @@ -301,7 +301,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.2.9.yaml b/manifests/alp/istio-inject-configmap-1.2.9.yaml index b43c0e1105c..ca3cfb64e50 100644 --- a/manifests/alp/istio-inject-configmap-1.2.9.yaml +++ b/manifests/alp/istio-inject-configmap-1.2.9.yaml @@ -301,7 +301,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.3.0.yaml b/manifests/alp/istio-inject-configmap-1.3.0.yaml index d34c9e4fc73..118e3397e0a 100644 --- a/manifests/alp/istio-inject-configmap-1.3.0.yaml +++ b/manifests/alp/istio-inject-configmap-1.3.0.yaml @@ -327,7 +327,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.3.1.yaml b/manifests/alp/istio-inject-configmap-1.3.1.yaml index 21a7fa69f53..ebba3b83bd0 100644 --- a/manifests/alp/istio-inject-configmap-1.3.1.yaml +++ b/manifests/alp/istio-inject-configmap-1.3.1.yaml @@ -333,7 +333,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.3.2.yaml b/manifests/alp/istio-inject-configmap-1.3.2.yaml index 21a7fa69f53..ebba3b83bd0 100644 --- a/manifests/alp/istio-inject-configmap-1.3.2.yaml +++ b/manifests/alp/istio-inject-configmap-1.3.2.yaml @@ -333,7 +333,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.3.3.yaml b/manifests/alp/istio-inject-configmap-1.3.3.yaml index 21a7fa69f53..ebba3b83bd0 100644 --- a/manifests/alp/istio-inject-configmap-1.3.3.yaml +++ b/manifests/alp/istio-inject-configmap-1.3.3.yaml @@ -333,7 +333,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.3.4.yaml b/manifests/alp/istio-inject-configmap-1.3.4.yaml index 21a7fa69f53..ebba3b83bd0 100644 --- a/manifests/alp/istio-inject-configmap-1.3.4.yaml +++ b/manifests/alp/istio-inject-configmap-1.3.4.yaml @@ -333,7 +333,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.3.5.yaml b/manifests/alp/istio-inject-configmap-1.3.5.yaml index 21a7fa69f53..ebba3b83bd0 100644 --- a/manifests/alp/istio-inject-configmap-1.3.5.yaml +++ b/manifests/alp/istio-inject-configmap-1.3.5.yaml @@ -333,7 +333,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.4.0.yaml b/manifests/alp/istio-inject-configmap-1.4.0.yaml index 6664db81136..d7e410b8ffc 100644 --- a/manifests/alp/istio-inject-configmap-1.4.0.yaml +++ b/manifests/alp/istio-inject-configmap-1.4.0.yaml @@ -351,7 +351,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.4.1.yaml b/manifests/alp/istio-inject-configmap-1.4.1.yaml index 6664db81136..d7e410b8ffc 100644 --- a/manifests/alp/istio-inject-configmap-1.4.1.yaml +++ b/manifests/alp/istio-inject-configmap-1.4.1.yaml @@ -351,7 +351,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.4.2.yaml b/manifests/alp/istio-inject-configmap-1.4.2.yaml index 6664db81136..d7e410b8ffc 100644 --- a/manifests/alp/istio-inject-configmap-1.4.2.yaml +++ b/manifests/alp/istio-inject-configmap-1.4.2.yaml @@ -351,7 +351,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.6.yaml b/manifests/alp/istio-inject-configmap-1.6.yaml index c76fd005949..b64f861793b 100644 --- a/manifests/alp/istio-inject-configmap-1.6.yaml +++ b/manifests/alp/istio-inject-configmap-1.6.yaml @@ -363,7 +363,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.7.yaml b/manifests/alp/istio-inject-configmap-1.7.yaml index 3467af3e56e..eb3e0132878 100644 --- a/manifests/alp/istio-inject-configmap-1.7.yaml +++ b/manifests/alp/istio-inject-configmap-1.7.yaml @@ -369,7 +369,7 @@ data: - mountPath: /var/run/dikastes name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/alp/istio-inject-configmap-1.9.yaml b/manifests/alp/istio-inject-configmap-1.9.yaml index bf58ec572f2..0335c6f12ed 100644 --- a/manifests/alp/istio-inject-configmap-1.9.yaml +++ b/manifests/alp/istio-inject-configmap-1.9.yaml @@ -428,7 +428,7 @@ data: name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false @@ -714,7 +714,7 @@ data: name: dikastes-sock - name: dikastes - image: calico/dikastes:v3.27.3 + image: calico/dikastes:v3.27.4 args: ["server", "-l", "/var/run/dikastes/dikastes.sock", "-d", "/var/run/felix/nodeagent/socket"] securityContext: allowPrivilegeEscalation: false diff --git a/manifests/apiserver.yaml b/manifests/apiserver.yaml index 1a3dc22845a..10fbd2d62e3 100644 --- a/manifests/apiserver.yaml +++ b/manifests/apiserver.yaml @@ -77,7 +77,7 @@ spec: env: - name: DATASTORE_TYPE value: kubernetes - image: calico/apiserver:v3.27.3 + image: calico/apiserver:v3.27.4 livenessProbe: httpGet: path: /version diff --git a/manifests/calico-bpf.yaml b/manifests/calico-bpf.yaml index c3e993316e5..8a9b193c626 100644 --- a/manifests/calico-bpf.yaml +++ b/manifests/calico-bpf.yaml @@ -4782,7 +4782,7 @@ spec: # It can be deleted if this is a fresh installation, or if you have already # upgraded to use calico-ipam. - name: upgrade-ipam - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/calico-ipam", "-upgrade"] envFrom: @@ -4821,7 +4821,7 @@ spec: # This container installs the CNI binaries # and CNI network config file on each node. - name: install-cni - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/install"] envFrom: @@ -4875,7 +4875,7 @@ spec: # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode. - name: "mount-bpffs" - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent command: ["calico-node", "-init", "-best-effort"] volumeMounts: @@ -4901,7 +4901,7 @@ spec: # container programs network policy and routes on each # host. - name: calico-node - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent envFrom: - configMapRef: @@ -5135,7 +5135,7 @@ spec: priorityClassName: system-cluster-critical containers: - name: calico-kube-controllers - image: docker.io/calico/kube-controllers:v3.27.3 + image: docker.io/calico/kube-controllers:v3.27.4 imagePullPolicy: IfNotPresent env: # Choose which controllers to run. diff --git a/manifests/calico-etcd.yaml b/manifests/calico-etcd.yaml index 1e9fa0ed38d..bed7187946a 100644 --- a/manifests/calico-etcd.yaml +++ b/manifests/calico-etcd.yaml @@ -302,7 +302,7 @@ spec: # This container installs the CNI binaries # and CNI network config file on each node. - name: install-cni - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/install"] envFrom: @@ -348,7 +348,7 @@ spec: # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode. - name: "mount-bpffs" - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent command: ["calico-node", "-init", "-best-effort"] volumeMounts: @@ -374,7 +374,7 @@ spec: # container programs network policy and routes on each # host. - name: calico-node - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent envFrom: - configMapRef: @@ -617,7 +617,7 @@ spec: hostNetwork: true containers: - name: calico-kube-controllers - image: docker.io/calico/kube-controllers:v3.27.3 + image: docker.io/calico/kube-controllers:v3.27.4 imagePullPolicy: IfNotPresent env: # The location of the etcd cluster. diff --git a/manifests/calico-policy-only.yaml b/manifests/calico-policy-only.yaml index c4f020ad1bf..bd9d5dbc9e4 100644 --- a/manifests/calico-policy-only.yaml +++ b/manifests/calico-policy-only.yaml @@ -4763,7 +4763,7 @@ spec: # This container installs the CNI binaries # and CNI network config file on each node. - name: install-cni - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/install"] envFrom: @@ -4800,7 +4800,7 @@ spec: # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode. - name: "mount-bpffs" - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent command: ["calico-node", "-init", "-best-effort"] volumeMounts: @@ -4826,7 +4826,7 @@ spec: # container programs network policy and routes on each # host. - name: calico-node - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent envFrom: - configMapRef: @@ -5017,7 +5017,7 @@ spec: priorityClassName: system-cluster-critical containers: - name: calico-kube-controllers - image: docker.io/calico/kube-controllers:v3.27.3 + image: docker.io/calico/kube-controllers:v3.27.4 imagePullPolicy: IfNotPresent env: # Choose which controllers to run. @@ -5106,7 +5106,7 @@ spec: securityContext: fsGroup: 65534 containers: - - image: docker.io/calico/typha:v3.27.3 + - image: docker.io/calico/typha:v3.27.4 imagePullPolicy: IfNotPresent name: calico-typha ports: diff --git a/manifests/calico-typha.yaml b/manifests/calico-typha.yaml index d469157fdd0..0bfe3fbfbe4 100644 --- a/manifests/calico-typha.yaml +++ b/manifests/calico-typha.yaml @@ -4813,7 +4813,7 @@ spec: # It can be deleted if this is a fresh installation, or if you have already # upgraded to use calico-ipam. - name: upgrade-ipam - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/calico-ipam", "-upgrade"] envFrom: @@ -4841,7 +4841,7 @@ spec: # This container installs the CNI binaries # and CNI network config file on each node. - name: install-cni - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/install"] envFrom: @@ -4884,7 +4884,7 @@ spec: # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode. - name: "mount-bpffs" - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent command: ["calico-node", "-init", "-best-effort"] volumeMounts: @@ -4910,7 +4910,7 @@ spec: # container programs network policy and routes on each # host. - name: calico-node - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent envFrom: - configMapRef: @@ -5136,7 +5136,7 @@ spec: priorityClassName: system-cluster-critical containers: - name: calico-kube-controllers - image: docker.io/calico/kube-controllers:v3.27.3 + image: docker.io/calico/kube-controllers:v3.27.4 imagePullPolicy: IfNotPresent env: # Choose which controllers to run. @@ -5225,7 +5225,7 @@ spec: securityContext: fsGroup: 65534 containers: - - image: docker.io/calico/typha:v3.27.3 + - image: docker.io/calico/typha:v3.27.4 imagePullPolicy: IfNotPresent name: calico-typha ports: diff --git a/manifests/calico-vxlan.yaml b/manifests/calico-vxlan.yaml index 23046c6c53e..6562bc8151c 100644 --- a/manifests/calico-vxlan.yaml +++ b/manifests/calico-vxlan.yaml @@ -4777,7 +4777,7 @@ spec: # It can be deleted if this is a fresh installation, or if you have already # upgraded to use calico-ipam. - name: upgrade-ipam - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/calico-ipam", "-upgrade"] envFrom: @@ -4805,7 +4805,7 @@ spec: # This container installs the CNI binaries # and CNI network config file on each node. - name: install-cni - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/install"] envFrom: @@ -4848,7 +4848,7 @@ spec: # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode. - name: "mount-bpffs" - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent command: ["calico-node", "-init", "-best-effort"] volumeMounts: @@ -4874,7 +4874,7 @@ spec: # container programs network policy and routes on each # host. - name: calico-node - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent envFrom: - configMapRef: @@ -5092,7 +5092,7 @@ spec: priorityClassName: system-cluster-critical containers: - name: calico-kube-controllers - image: docker.io/calico/kube-controllers:v3.27.3 + image: docker.io/calico/kube-controllers:v3.27.4 imagePullPolicy: IfNotPresent env: # Choose which controllers to run. diff --git a/manifests/calico.yaml b/manifests/calico.yaml index de3545775a1..d480a79ecf7 100644 --- a/manifests/calico.yaml +++ b/manifests/calico.yaml @@ -4777,7 +4777,7 @@ spec: # It can be deleted if this is a fresh installation, or if you have already # upgraded to use calico-ipam. - name: upgrade-ipam - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/calico-ipam", "-upgrade"] envFrom: @@ -4805,7 +4805,7 @@ spec: # This container installs the CNI binaries # and CNI network config file on each node. - name: install-cni - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/install"] envFrom: @@ -4848,7 +4848,7 @@ spec: # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode. - name: "mount-bpffs" - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent command: ["calico-node", "-init", "-best-effort"] volumeMounts: @@ -4874,7 +4874,7 @@ spec: # container programs network policy and routes on each # host. - name: calico-node - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent envFrom: - configMapRef: @@ -5094,7 +5094,7 @@ spec: priorityClassName: system-cluster-critical containers: - name: calico-kube-controllers - image: docker.io/calico/kube-controllers:v3.27.3 + image: docker.io/calico/kube-controllers:v3.27.4 imagePullPolicy: IfNotPresent env: # Choose which controllers to run. diff --git a/manifests/calicoctl-etcd.yaml b/manifests/calicoctl-etcd.yaml index 7514a289e66..867bc08af07 100644 --- a/manifests/calicoctl-etcd.yaml +++ b/manifests/calicoctl-etcd.yaml @@ -1,7 +1,7 @@ # Calico Version master # https://projectcalico.docs.tigera.io/releases#master # This manifest includes the following component versions: -# calico/ctl:v3.27.3 +# calico/ctl:v3.27.4 apiVersion: v1 kind: Pod @@ -14,7 +14,7 @@ spec: hostNetwork: true containers: - name: calicoctl - image: calico/ctl:v3.27.3 + image: calico/ctl:v3.27.4 command: - /calicoctl args: diff --git a/manifests/calicoctl.yaml b/manifests/calicoctl.yaml index 5b83f824ffa..d0f68c1290d 100644 --- a/manifests/calicoctl.yaml +++ b/manifests/calicoctl.yaml @@ -1,7 +1,7 @@ # Calico Version master # https://projectcalico.docs.tigera.io/releases#master # This manifest includes the following component versions: -# calico/ctl:v3.27.3 +# calico/ctl:v3.27.4 apiVersion: v1 kind: ServiceAccount @@ -23,7 +23,7 @@ spec: serviceAccountName: calicoctl containers: - name: calicoctl - image: calico/ctl:v3.27.3 + image: calico/ctl:v3.27.4 command: - /calicoctl args: diff --git a/manifests/canal-etcd.yaml b/manifests/canal-etcd.yaml index 061424f2664..043885d6e7a 100644 --- a/manifests/canal-etcd.yaml +++ b/manifests/canal-etcd.yaml @@ -382,7 +382,7 @@ spec: # This container installs the CNI binaries # and CNI network config file on each node. - name: install-cni - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/install"] envFrom: @@ -452,7 +452,7 @@ spec: # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode. - name: "mount-bpffs" - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent command: ["calico-node", "-init", "-best-effort"] volumeMounts: @@ -478,7 +478,7 @@ spec: # container programs network policy and routes on each # host. - name: calico-node - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent envFrom: - configMapRef: @@ -777,7 +777,7 @@ spec: hostNetwork: true containers: - name: calico-kube-controllers - image: docker.io/calico/kube-controllers:v3.27.3 + image: docker.io/calico/kube-controllers:v3.27.4 imagePullPolicy: IfNotPresent env: # The location of the etcd cluster. diff --git a/manifests/canal.yaml b/manifests/canal.yaml index e8a80c74b9a..2b2836b6c42 100644 --- a/manifests/canal.yaml +++ b/manifests/canal.yaml @@ -4786,7 +4786,7 @@ spec: # This container installs the CNI binaries # and CNI network config file on each node. - name: install-cni - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/install"] envFrom: @@ -4835,7 +4835,7 @@ spec: # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode. - name: "mount-bpffs" - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent command: ["calico-node", "-init", "-best-effort"] volumeMounts: @@ -4861,7 +4861,7 @@ spec: # container programs network policy and routes on each # host. - name: calico-node - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent envFrom: - configMapRef: @@ -5092,7 +5092,7 @@ spec: priorityClassName: system-cluster-critical containers: - name: calico-kube-controllers - image: docker.io/calico/kube-controllers:v3.27.3 + image: docker.io/calico/kube-controllers:v3.27.4 imagePullPolicy: IfNotPresent env: # Choose which controllers to run. diff --git a/manifests/csi-driver.yaml b/manifests/csi-driver.yaml index 9a993a27fbe..f05f7a4eae7 100644 --- a/manifests/csi-driver.yaml +++ b/manifests/csi-driver.yaml @@ -50,7 +50,7 @@ spec: effect: NoSchedule containers: - name: calico-csi - image: calico/csi:v3.27.3 + image: calico/csi:v3.27.4 imagePullPolicy: IfNotPresent args: - --nodeid=$(KUBE_NODE_NAME) @@ -75,7 +75,7 @@ spec: mountPath: /var/lib/kubelet/ mountPropagation: "Bidirectional" - name: csi-node-driver-registrar - image: calico/node-driver-registrar:v3.27.3 + image: calico/node-driver-registrar:v3.27.4 imagePullPolicy: IfNotPresent args: - --v=5 diff --git a/manifests/flannel-migration/calico.yaml b/manifests/flannel-migration/calico.yaml index 378a3f3a93c..6501861b71f 100644 --- a/manifests/flannel-migration/calico.yaml +++ b/manifests/flannel-migration/calico.yaml @@ -4779,7 +4779,7 @@ spec: # It can be deleted if this is a fresh installation, or if you have already # upgraded to use calico-ipam. - name: upgrade-ipam - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/calico-ipam", "-upgrade"] envFrom: @@ -4807,7 +4807,7 @@ spec: # This container installs the CNI binaries # and CNI network config file on each node. - name: install-cni - image: docker.io/calico/cni:v3.27.3 + image: docker.io/calico/cni:v3.27.4 imagePullPolicy: IfNotPresent command: ["/opt/cni/bin/install"] envFrom: @@ -4850,7 +4850,7 @@ spec: # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode. - name: "mount-bpffs" - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent command: ["calico-node", "-init", "-best-effort"] volumeMounts: @@ -4876,7 +4876,7 @@ spec: # container programs network policy and routes on each # host. - name: calico-node - image: docker.io/calico/node:v3.27.3 + image: docker.io/calico/node:v3.27.4 imagePullPolicy: IfNotPresent envFrom: - configMapRef: @@ -5094,7 +5094,7 @@ spec: priorityClassName: system-cluster-critical containers: - name: calico-kube-controllers - image: docker.io/calico/kube-controllers:v3.27.3 + image: docker.io/calico/kube-controllers:v3.27.4 imagePullPolicy: IfNotPresent env: # Choose which controllers to run. diff --git a/manifests/ocp/02-tigera-operator.yaml b/manifests/ocp/02-tigera-operator.yaml index 9cc241f0c8d..4b1dccb9f7f 100644 --- a/manifests/ocp/02-tigera-operator.yaml +++ b/manifests/ocp/02-tigera-operator.yaml @@ -32,7 +32,7 @@ spec: dnsPolicy: ClusterFirstWithHostNet containers: - name: tigera-operator - image: quay.io/tigera/operator:v1.32.7 + image: quay.io/tigera/operator:v1.32.10 imagePullPolicy: IfNotPresent command: - operator @@ -50,7 +50,7 @@ spec: - name: OPERATOR_NAME value: "tigera-operator" - name: TIGERA_OPERATOR_INIT_IMAGE_VERSION - value: v1.32.7 + value: v1.32.10 envFrom: - configMapRef: name: kubernetes-services-endpoint @@ -69,7 +69,7 @@ spec: name: install-resources-script initContainers: - name: create-initial-resources - image: docker.io/calico/ctl:v3.27.3 + image: docker.io/calico/ctl:v3.27.4 env: - name: DATASTORE_TYPE value: kubernetes diff --git a/manifests/tigera-operator.yaml b/manifests/tigera-operator.yaml index 41796b5f54f..8e7ad7a8532 100644 --- a/manifests/tigera-operator.yaml +++ b/manifests/tigera-operator.yaml @@ -25284,7 +25284,7 @@ spec: dnsPolicy: ClusterFirstWithHostNet containers: - name: tigera-operator - image: quay.io/tigera/operator:v1.32.7 + image: quay.io/tigera/operator:v1.32.10 imagePullPolicy: IfNotPresent command: - operator @@ -25302,7 +25302,7 @@ spec: - name: OPERATOR_NAME value: "tigera-operator" - name: TIGERA_OPERATOR_INIT_IMAGE_VERSION - value: v1.32.7 + value: v1.32.10 envFrom: - configMapRef: name: kubernetes-services-endpoint From 53d91daa86e88033498c5bab6b3918562b0baaa4 Mon Sep 17 00:00:00 2001 From: Daniel Fox Date: Mon, 8 Jul 2024 13:13:22 -0700 Subject: [PATCH 2/2] Add release notes for v3.27.4 --- release-notes/v3.27.4-release-notes.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 release-notes/v3.27.4-release-notes.md diff --git a/release-notes/v3.27.4-release-notes.md b/release-notes/v3.27.4-release-notes.md new file mode 100644 index 00000000000..e027868564b --- /dev/null +++ b/release-notes/v3.27.4-release-notes.md @@ -0,0 +1,18 @@ +08 Jul 2024 + +#### Bug fixes + + - Fix calico-felix rpm libpcap.so linking dependency. [calico #8986](https://github.com/projectcalico/calico/pull/8986) (@hjiawei) + - Upgrade bpftool to v7.4 to fix the issue of loading XDP programs in iptables data plane that happens in few distributions. [calico #8940](https://github.com/projectcalico/calico/pull/8940) (@mazdakn) + - ebpf: fix - let the node handle packet when we are not sure about the destination [calico #8926](https://github.com/projectcalico/calico/pull/8926) (@tomastigera) + - ebpf: fixed cleaning of programs and map when switching from ebpf to iptables mode. [calico #8888](https://github.com/projectcalico/calico/pull/8888) (@tomastigera) + - Fix errors on kernels that don't support the XFRM netlink family. [calico #8872](https://github.com/projectcalico/calico/pull/8872) (@fasaxc) + - ebpf: Update map definition in sockops program to let libbpf v1.0+ load them successfully. [calico #8702](https://github.com/projectcalico/calico/pull/8702) (@mazdakn) + - ebpf: fix natOutgoing SNAT for icmp6 [calico #8686](https://github.com/projectcalico/calico/pull/8686) (@tomastigera) + - Improve cni-plugin binary install verification. [calico #8841](https://github.com/projectcalico/calico/pull/8841) (@ialidzhikov) + +#### Other changes + + - Update go version to v1.22.4, kubernetes version to v1.27.15, UBI version to v8.10 [calico #8937](https://github.com/projectcalico/calico/pull/8937) (@coutinhop) + - ebpf: support for service loop prevention [calico #8893](https://github.com/projectcalico/calico/pull/8893) (@sridhartigera) + - ebpf: cleanup BPF special devices when BPF is turned off [calico #8891](https://github.com/projectcalico/calico/pull/8891) (@tomastigera)