01 Apr 2022
Included Calico versions
Calico version: v3.22.1
Calico Enterprise version: v3.13.0
Enhancements
- [Calico Enterprise] Cherry pick #1600 to release-v1.26 #1837 (@freecaykes)
- [Calico Enterprise] Default UISettings and UISettingsGroups need to be added to managed cluster #1774 (@robbrockbank)
- [Calico Enterprise] Default tigera infrastructure UISettings layer definition to line up with UI expected data #1770 (@robbrockbank)
- [Calico Enterprise] Install UISettings and UISettingsGroup as part of manager after api server is installed #1766 (@robbrockbank)
- [Calico Enterprise] Add default UISettingsGroups and UISettings for pre-defined roles #1752 (@robbrockbank)
- [Calico Enterprise] Secure prometheus metrics endpoints #1750 (@rene-dekker)
- [Calico Enterprise] Add GlobalAlertTemplates for ADJobs #1600 (@freecaykes)
Bug fixes
- [Calico Enterprise] Automated cherry pick of #1878: Add the internal-manager-tls pem to the trusted bundle for #1879 (@rene-dekker)
- [Calico Enterprise] Automated cherry pick of #1853: Move pullsecret creation right after the namespace is created #1854 (@doublek)
- [Calico Enterprise] [v1.26] Fix mcm where certificate is not accepted (cherry-pick) #1841 (@rene-dekker)
- windows: create upgrader resources only on AKS #1810 (@lmm)
- Add specific registry for key-cert-provisioner #1772 (@Brian-McM)
- [Calico Enterprise] Don't set owner ref on UISettings #1769 (@robbrockbank)
- [Calico Enterprise] updating envoy config to have NodePort listener #1756 (@penkeysuresh)
- [Calico Enterprise] Fix packet capture RBAC for default users #1751 (@robbrockbank)
Other changes
- Prep for v3.13.0 #1883 (@doublek)
- Automated cherry pick of #1863: Bump go-build to 0.65.1 #1864 (@doublek)
- [Calico Enterprise] Automated cherry pick of #1856: feat(render/ids): add missing ad globalalert templates #1862 (@doublek)
- Test changed to allow master or release branches #1840 (@mikestephen)
- Make validate-gen-files #1839 (@rene-dekker)
- Fix mcm where certificate is not accepted #1835 (@rene-dekker)
- Update CRDs to the latest #1834 (@hjiawei)
- Remove a git-hooks check that is not applicable to the repo #1830 (@rene-dekker)
- Make gen-files to fix the build #1827 (@rene-dekker)
- Fix fdescribe #1826 (@rene-dekker)
- refactoring manager test case function #1824 (@penkeysuresh)
- Prevent ginkgo fdescribe and missing license with git hooks #1823 (@rene-dekker)
- make gen files and versions #1819 (@rene-dekker)
- cleanup comments #1814 (@freecaykes)
- Update projectcalico CRDs #1811 (@tmjd)
- Update projectcalico.org CRDs #1806 (@tmjd)
- Setting MaxUnavailable to 1 when calculation against # of available calico node pods resolves to 0 #1804 (@freecaykes)
- bundle: update operator bundle tooling and docs #1803 (@lmm)
- Fix converstion of unitless env vars and failsafe ports #1802 (@caseydavenport)
- [Calico Enterprise] Set Kibana public domain based on Authentication domain #1801 (@tmjd)
- Remove env that is no longer used #1800 (@rene-dekker)
- Add AlertException cluster roles for apiserver and manager users #1799 (@hjiawei)
- Update projectcalico.org CRDs #1798 (@tmjd)
- [master] Remove <v1.25 pod monitor #1795 (@rene-dekker)
- Move PodDisruptionBudget from apiVersion policy/v1beta1 to policy/v1 #1794 (@coutinhop)
- Misc typo fixes #1793 (@Akasurde)
- Add tests to check that the elasticsearch index suffix is properly set on components #1790 (@Brian-McM)
- adding changes for testing configmaps and volume mounts #1788 (@penkeysuresh)
- Web Application Firewall updates #1784 (@bartolini)
- Nil de-reference when err is nil #1781 (@rene-dekker)
- [Calico Enterprise] Default tigera infrastructure UISettings layer definition to line up with UI expected data #1771 (@robbrockbank)
- Pin golang.org/x/text #1765 (@caseydavenport)
- Run gen-versions #1753 (@robbrockbank)
- Run make gen-versions to update CRD #1747 (@doublek)
- Improving teardown #1710 (@tmjd)
- Create certificates from a central CA & simplify our certificate related code #1685 (@rene-dekker)
- ADJob Podtemplates for tigera-intrusion-detecion with corresponding updated ClusterRoles #1568 (@freecaykes)