Updates for v3.24.1

projectcalico · Aug 25, 2022 · 83493da · 83493da
1 parent d1c16d3
commit 83493da
Show file tree

Hide file tree

Showing 21 changed files with 113 additions and 65 deletions.
diff --git a/calico/_data/versions.yml b/calico/_data/versions.yml
@@ -1,3 +1,39 @@
+- title: v3.24.1
+  manifests_url: https://raw.githubusercontent.com/projectcalico/calico/v3.24.1
+  chart:
+    version: 0
+  tigera-operator:
+   image: tigera/operator
+   registry: quay.io
+   version: v1.28.1
+  components:
+     typha:
+      version: v3.24.1
+     calicoctl:
+      version: v3.24.1
+     calico/node:
+      version: v3.24.1
+     calico/cni:
+      version: v3.24.1
+     calico/apiserver:
+      version: v3.24.1
+     calico/kube-controllers:
+      version: v3.24.1
+     calico/flannel-migration-controller:
+      version: v3.24.1
+     calico/windows:
+      version: v3.24.1
+     networking-calico:
+      version: v3.24.1
+     flannel:
+      version: v0.15.1
+     calico/dikastes:
+      version: v3.24.1
+     flexvol:
+      version: v3.24.1
+     csi-driver:
+      version: v3.24.1
+
 - title: v3.24.0
   manifests_url: https://raw.githubusercontent.com/projectcalico/calico/v3.24.0
   chart:

diff --git a/calico/_includes/release-notes/v3.24.1-release-notes.md b/calico/_includes/release-notes/v3.24.1-release-notes.md
@@ -0,0 +1,12 @@
+25 Aug 2022
+
+#### Bug fixes
+
+ - Fixes missing permissions for the CSI driver in the OCP operator manifests. [calico #6616](https://github.com/projectcalico/calico/pull/6616) (@mgleung)
+ - Ensure that the flexvolume binary is statically linked [calico #6605](https://github.com/projectcalico/calico/pull/6605) (@rene-dekker)
+ - Update Installation CRD to include new CSI changes introduced by recent operator API changes. [calico #6602](https://github.com/projectcalico/calico/pull/6602) (@Josh-Tigera)
+
+#### Other changes
+
+ - Bump K8S_VERSION and KUBECTL_VERSION to v1.24.3 in metadata.mk [calico #6607](https://github.com/projectcalico/calico/pull/6607) (@coutinhop)
+ - Retry kube-controllers initialization on failure [calico #6595](https://github.com/projectcalico/calico/pull/6595) (@tmjd)
diff --git a/charts/calico/values.yaml b/charts/calico/values.yaml
@@ -1,5 +1,5 @@
 # The Calico version to use when generating manifests.
-version: v3.24.0
+version: v3.24.1
 
 # Configure the images to use when generating manifests.
 node:

diff --git a/charts/tigera-operator/values.yaml b/charts/tigera-operator/values.yaml
@@ -41,8 +41,8 @@ podLabels: {}
 # Image and registry configuration for the tigera/operator pod.
 tigeraOperator:
   image: tigera/operator
-  version: v1.28.0
+  version: v1.28.1
   registry: quay.io
 calicoctl:
   image: docker.io/calico/ctl
-  tag: v3.24.0
+  tag: v3.24.1
diff --git a/manifests/apiserver.yaml b/manifests/apiserver.yaml
@@ -77,7 +77,7 @@ spec:
         env:
         - name: DATASTORE_TYPE
           value: kubernetes
-        image: calico/apiserver:v3.24.0
+        image: calico/apiserver:v3.24.1
         livenessProbe:
           httpGet:
             path: /version

diff --git a/manifests/calico-bpf.yaml b/manifests/calico-bpf.yaml
@@ -4390,7 +4390,7 @@ spec:
         # It can be deleted if this is a fresh installation, or if you have already
         # upgraded to use calico-ipam.
         - name: upgrade-ipam
-          image: docker.io/calico/cni:v3.24.0
+          image: docker.io/calico/cni:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["/opt/cni/bin/calico-ipam", "-upgrade"]
           envFrom:
@@ -4429,7 +4429,7 @@ spec:
         # This container installs the CNI binaries
         # and CNI network config file on each node.
         - name: install-cni
-          image: docker.io/calico/cni:v3.24.0
+          image: docker.io/calico/cni:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["/opt/cni/bin/install"]
           envFrom:
@@ -4483,7 +4483,7 @@ spec:
         # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed
         # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode.
         - name: "mount-bpffs"
-          image: docker.io/calico/node:v3.24.0
+          image: docker.io/calico/node:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["calico-node", "-init", "-best-effort"]
           volumeMounts:
@@ -4509,7 +4509,7 @@ spec:
         # container programs network policy and routes on each
         # host.
         - name: calico-node
-          image: docker.io/calico/node:v3.24.0
+          image: docker.io/calico/node:v3.24.1
           imagePullPolicy: IfNotPresent
           envFrom:
           - configMapRef:
@@ -4740,7 +4740,7 @@ spec:
       priorityClassName: system-cluster-critical
       containers:
         - name: calico-kube-controllers
-          image: docker.io/calico/kube-controllers:v3.24.0
+          image: docker.io/calico/kube-controllers:v3.24.1
           imagePullPolicy: IfNotPresent
           env:
             # Choose which controllers to run.

diff --git a/manifests/calico-etcd.yaml b/manifests/calico-etcd.yaml
@@ -266,7 +266,7 @@ spec:
         # This container installs the CNI binaries
         # and CNI network config file on each node.
         - name: install-cni
-          image: docker.io/calico/cni:v3.24.0
+          image: docker.io/calico/cni:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["/opt/cni/bin/install"]
           envFrom:
@@ -312,7 +312,7 @@ spec:
         # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed
         # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode.
         - name: "mount-bpffs"
-          image: docker.io/calico/node:v3.24.0
+          image: docker.io/calico/node:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["calico-node", "-init", "-best-effort"]
           volumeMounts:
@@ -338,7 +338,7 @@ spec:
         # container programs network policy and routes on each
         # host.
         - name: calico-node
-          image: docker.io/calico/node:v3.24.0
+          image: docker.io/calico/node:v3.24.1
           imagePullPolicy: IfNotPresent
           envFrom:
           - configMapRef:
@@ -578,7 +578,7 @@ spec:
       hostNetwork: true
       containers:
         - name: calico-kube-controllers
-          image: docker.io/calico/kube-controllers:v3.24.0
+          image: docker.io/calico/kube-controllers:v3.24.1
           imagePullPolicy: IfNotPresent
           env:
             # The location of the etcd cluster.

diff --git a/manifests/calico-policy-only.yaml b/manifests/calico-policy-only.yaml
@@ -4386,7 +4386,7 @@ spec:
         # This container installs the CNI binaries
         # and CNI network config file on each node.
         - name: install-cni
-          image: docker.io/calico/cni:v3.24.0
+          image: docker.io/calico/cni:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["/opt/cni/bin/install"]
           envFrom:
@@ -4423,7 +4423,7 @@ spec:
         # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed
         # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode.
         - name: "mount-bpffs"
-          image: docker.io/calico/node:v3.24.0
+          image: docker.io/calico/node:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["calico-node", "-init", "-best-effort"]
           volumeMounts:
@@ -4449,7 +4449,7 @@ spec:
         # container programs network policy and routes on each
         # host.
         - name: calico-node
-          image: docker.io/calico/node:v3.24.0
+          image: docker.io/calico/node:v3.24.1
           imagePullPolicy: IfNotPresent
           envFrom:
           - configMapRef:
@@ -4637,7 +4637,7 @@ spec:
       priorityClassName: system-cluster-critical
       containers:
         - name: calico-kube-controllers
-          image: docker.io/calico/kube-controllers:v3.24.0
+          image: docker.io/calico/kube-controllers:v3.24.1
           imagePullPolicy: IfNotPresent
           env:
             # Choose which controllers to run.
@@ -4705,7 +4705,7 @@ spec:
       securityContext:
         fsGroup: 65534
       containers:
-      - image: docker.io/calico/typha:v3.24.0
+      - image: docker.io/calico/typha:v3.24.1
         imagePullPolicy: IfNotPresent
         name: calico-typha
         ports:

diff --git a/manifests/calico-typha.yaml b/manifests/calico-typha.yaml
@@ -4421,7 +4421,7 @@ spec:
         # It can be deleted if this is a fresh installation, or if you have already
         # upgraded to use calico-ipam.
         - name: upgrade-ipam
-          image: docker.io/calico/cni:v3.24.0
+          image: docker.io/calico/cni:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["/opt/cni/bin/calico-ipam", "-upgrade"]
           envFrom:
@@ -4449,7 +4449,7 @@ spec:
         # This container installs the CNI binaries
         # and CNI network config file on each node.
         - name: install-cni
-          image: docker.io/calico/cni:v3.24.0
+          image: docker.io/calico/cni:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["/opt/cni/bin/install"]
           envFrom:
@@ -4492,7 +4492,7 @@ spec:
         # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed
         # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode.
         - name: "mount-bpffs"
-          image: docker.io/calico/node:v3.24.0
+          image: docker.io/calico/node:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["calico-node", "-init", "-best-effort"]
           volumeMounts:
@@ -4518,7 +4518,7 @@ spec:
         # container programs network policy and routes on each
         # host.
         - name: calico-node
-          image: docker.io/calico/node:v3.24.0
+          image: docker.io/calico/node:v3.24.1
           imagePullPolicy: IfNotPresent
           envFrom:
           - configMapRef:
@@ -4741,7 +4741,7 @@ spec:
       priorityClassName: system-cluster-critical
       containers:
         - name: calico-kube-controllers
-          image: docker.io/calico/kube-controllers:v3.24.0
+          image: docker.io/calico/kube-controllers:v3.24.1
           imagePullPolicy: IfNotPresent
           env:
             # Choose which controllers to run.
@@ -4809,7 +4809,7 @@ spec:
       securityContext:
         fsGroup: 65534
       containers:
-      - image: docker.io/calico/typha:v3.24.0
+      - image: docker.io/calico/typha:v3.24.1
         imagePullPolicy: IfNotPresent
         name: calico-typha
         ports:

diff --git a/manifests/calico-vxlan.yaml b/manifests/calico-vxlan.yaml
@@ -4385,7 +4385,7 @@ spec:
         # It can be deleted if this is a fresh installation, or if you have already
         # upgraded to use calico-ipam.
         - name: upgrade-ipam
-          image: docker.io/calico/cni:v3.24.0
+          image: docker.io/calico/cni:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["/opt/cni/bin/calico-ipam", "-upgrade"]
           envFrom:
@@ -4413,7 +4413,7 @@ spec:
         # This container installs the CNI binaries
         # and CNI network config file on each node.
         - name: install-cni
-          image: docker.io/calico/cni:v3.24.0
+          image: docker.io/calico/cni:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["/opt/cni/bin/install"]
           envFrom:
@@ -4456,7 +4456,7 @@ spec:
         # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed
         # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode.
         - name: "mount-bpffs"
-          image: docker.io/calico/node:v3.24.0
+          image: docker.io/calico/node:v3.24.1
           imagePullPolicy: IfNotPresent
           command: ["calico-node", "-init", "-best-effort"]
           volumeMounts:
@@ -4482,7 +4482,7 @@ spec:
         # container programs network policy and routes on each
         # host.
         - name: calico-node
-          image: docker.io/calico/node:v3.24.0
+          image: docker.io/calico/node:v3.24.1
           imagePullPolicy: IfNotPresent
           envFrom:
           - configMapRef:
@@ -4697,7 +4697,7 @@ spec:
       priorityClassName: system-cluster-critical
       containers:
         - name: calico-kube-controllers
-          image: docker.io/calico/kube-controllers:v3.24.0
+          image: docker.io/calico/kube-controllers:v3.24.1
           imagePullPolicy: IfNotPresent
           env:
             # Choose which controllers to run.

diff --git a/manifests/calico-windows-bgp.yaml b/manifests/calico-windows-bgp.yaml
@@ -60,7 +60,7 @@ spec:
           operator: Exists
       initContainers:
       - name: install
-        image: calico/windows:v3.24.0
+        image: calico/windows:v3.24.1
         args:
           - ".\\host-process-install.ps1"
         imagePullPolicy: Always
@@ -76,7 +76,7 @@ spec:
               fieldPath: spec.nodeName
       containers:
       - name: node
-        image: calico/windows:v3.24.0
+        image: calico/windows:v3.24.1
         imagePullPolicy: Always
         args:
           - ".\\node\\node-service.ps1"
@@ -94,7 +94,7 @@ spec:
               apiVersion: v1
               fieldPath: spec.nodeName
       - name: felix
-        image: calico/windows:v3.24.0
+        image: calico/windows:v3.24.1
         imagePullPolicy: Always
         args:
         - ".\\felix\\felix-service.ps1"
@@ -128,7 +128,7 @@ spec:
           periodSeconds: 10
           timeoutSeconds: 10
       - name: confd
-        image: calico/windows:v3.24.0
+        image: calico/windows:v3.24.1
         imagePullPolicy: Always
         args:
           - ".\\confd\\confd-service.ps1"

diff --git a/manifests/calico-windows-vxlan.yaml b/manifests/calico-windows-vxlan.yaml
@@ -60,7 +60,7 @@ spec:
           operator: Exists
       initContainers:
       - name: install
-        image: calico/windows:v3.24.0
+        image: calico/windows:v3.24.1
         args:
           - ".\\host-process-install.ps1"
         imagePullPolicy: Always
@@ -76,7 +76,7 @@ spec:
               fieldPath: spec.nodeName
       containers:
       - name: node
-        image: calico/windows:v3.24.0
+        image: calico/windows:v3.24.1
         imagePullPolicy: Always
         args:
           - ".\\node\\node-service.ps1"
@@ -94,7 +94,7 @@ spec:
               apiVersion: v1
               fieldPath: spec.nodeName
       - name: felix
-        image: calico/windows:v3.24.0
+        image: calico/windows:v3.24.1
         imagePullPolicy: Always
         args:
         - ".\\felix\\felix-service.ps1"