08 Nov 2021
Included Calico versions
Calico version: v3.21.0
Calico Enterprise version: N/A
Enhancements
General:
- Adding flex-volume mount for felix sync #1579 (@penkeysuresh)
- Use boringssl #1566 (@caseydavenport)
- Adding active operator feature #1531 (@tmjd)
- Add feature to manage CRDs #1558 (@tmjd)
- Add option for calico-node to run as non privileged and non root #1544 (@mgleung)
- Support control plane replicas in Installation #1504 (@hjiawei)
Calico Enterprise:
- Add support for Calico for Windows upgrades #1532 (@lmm)
- Move misc Prometheus resources to Tigera Operator #1500 (@hjiawei)
- Changes for deploying l7 log collector daemon set #1505 (@penkeysuresh)
- Add UISettingsGroup and UISettings to accessible CRD set #1543 (@robbrockbank)
- Add resource quota to components #1523 (@doublek)
Bug fixes
General:
- Fix dereferencing nil error in es gateway #1567 (@Brian-McM)
- Ensure info messages are reporting a reason instead of an error #1569 (@jaderhs)
- Update IsAPIServerReady for variants #1528 (@tmjd)
- Don't run so many Typha instances on small clusters #1506 (@caseydavenport)
Calico Enterprise
- Ensure ControlPlaneNodeSelector and ControlPlaneNodeSelector are added to ES gateway and ES metrics #1561 (@lmm)
- Get internal elasticsearch secret from proper namespace #1545 (@Brian-McM)
- Add init container that logs SELinux context #1538 (@doublek)
- Add permissions to kube-controller to access DPI resource #1580 (@Suraiya-Hameed)
- Upgrade fixes v1 to elastic prometheus crds #1514 (@freecaykes)
Other changes
General:
- Generate bundles using v1 crds only and include future OCP versions #1557 (@lmm)
- Update image label values #1457 (@lmm)
- Allow write cni log dir #1571 (@mgleung)
Calico Enterprise
- Add Tolerations to Prometheus CRs #1576 (@Brian-McM)
- Add control plane tolerations to prometheus api #1572 (@Brian-McM)
- Copy pull secret to dpi namespace #1547 (@Suraiya-Hameed)
- Create tigera-dpi namespace irrespective of DPI resource #1516 (@Suraiya-Hameed)
- Make es admin username configurable for kube-controllers secret #1520 (@vberezny)