15 Aug 2021
Included Calico versions
Calico version: v3.20.0
Calico Enterprise version: v3.9.0
Enhancements
- [Calico Enterprise] Cherrypick ECK 1.3.2 and EK 7.11.2 upgrade to release 1.21 #1449 (@hjiawei)
- Enable FELIX_WIRGEUARDHOSTENCRYPTIONENABLED for AKS/EKS #1391 (@aaaaaaaalex)
- [Calico Enterprise] prometheus proxy managed under tigera operator #1379 (@freecaykes)
- [Calico Enterprise] Implement Operator logic to install ES Gateway #1341 (@vberezny)
- [Calico Enterprise] Operator changes for process path collection in flowLogs #1394 (@sridhartigera)
- [Calico Enterprise] Move Prometheus ClusterRole to Role #1405 (@hjiawei)
Other changes
- Update components and registry for v3.9.0 #1458 (@doublek)
- [cherry-pick]Fix! Enable authentication for packet capture (#1453) #1456 (@asincu)
- Default FelixConfiguration RouteTableRange when using AWS CNI [pick#1447 r1.21] #1454 (@tmjd)
- Merge pull request #1440 from song-jiang/song-felix-log #1446 (@song-jiang)
- Prep for v3.9 Enterprise release series #1435 (@doublek)
- Revert "Upgrade Elastic and Kibana to 7.11" #1431 (@hjiawei)
- Upgrade Elastic and Kibana to 7.11 #1430 (@hjiawei)
- Adds support for wireguard on EKS with AWS CNI #1420 (@mikestephen)
- Update ES Gateway render code to avoid re-rendering a customer provid… #1413 (@vberezny)
- Fix typo in ES service monitor name #1412 (@hjiawei)
- Add timeouts to liveness/readiness probes for node/kube-controllers. #1410 (@fasaxc)
- Fix kube-proxy crashloopback for kind cluster #1408 (@song-jiang)
- Fix! Render secret in operator namespace #1407 (@asincu)
- Add copyright headers to esgateway package #1406 (@vberezny)
- Extract packet capture as a service #1404 (@asincu)
- IPAM GC RBAC update #1402 (@caseydavenport)
- Add RBAC for endpointslices #1400 (@caseydavenport)
- Remove BYO Elasticsearch cert code cruft #1399 (@vberezny)
- Fix Elasticsearch service name for Managed clusters #1397 (@vberezny)
- Add label for ES gateway secrets #1396 (@stevegaossou)
- cert management for es-gateway #1395 (@vberezny)
- Add permissions to DeepPacketInspection resource #1388 (@Suraiya-Hameed)
- Adding status RBAC for globalthreatfeeds for apiserver #1375 (@tmjd)
- Enhance Monitor render unit tests #1374 (@hjiawei)
- Add default route to kibana #1370 (@Suraiya-Hameed)
- Check nf_conntrack for linux kernel 4.19+ #1367 (@hjiawei)
- Remove eks-log-forwarder deployment for Windows #1300 (@lmm)