DOCS-3000: Publish Calico Enterprise 3.23.2 - #2938
Conversation
❌ Deploy Preview for tigera failed. Why did it fail? →
|
✅ Deploy Preview for calico-docs-preview-next ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
There was a problem hiding this comment.
Pull request overview
Starter documentation PR to begin publishing the Calico Enterprise 3.23.2 patch release content under calico-enterprise_versioned_docs/version-3.23-2/ by introducing the new release metadata, wiring versioned variables, and creating an initial release-notes section.
Changes:
- Add a new top-of-list
v3.23.2entry inreleases.json, bumping Tigera component versions fromv3.23.1→v3.23.2and settingtigera-operatortov1.42.5. - Update
variables.jsto referencev3.23.2(release title, download URL, and chart version name). - Append a
3.23.2release-notes section dated Aug 20, 2026 with a placeholder bug-fix list.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| calico-enterprise_versioned_docs/version-3.23-2/releases.json | Introduces the new v3.23.2 release manifest and component/operator version pins. |
| calico-enterprise_versioned_docs/version-3.23-2/variables.js | Updates versioned variables to align generated docs/download links with v3.23.2. |
| calico-enterprise_versioned_docs/version-3.23-2/release-notes/index.mdx | Adds the initial 3.23.2 release-notes section (currently with placeholder bug fixes). |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| ### Calico Enterprise 3.23.2 bug fix release | ||
|
|
||
| August 20, 2026 | ||
|
|
||
| #### Bug fixes | ||
|
|
||
| * TBD | ||
|
|
| "title": "v3.23.2", | ||
| "tigera-operator": { | ||
| "version": "v1.42.5", | ||
| "image": "tigera/operator", | ||
| "registry": "quay.io" | ||
| }, |
The 3.23 branch pins ENVOY_GATEWAY_VERSION = v1.8.3 in third_party/envoy-gateway/Makefile. The docs still said 1.8.0.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.
Suppressed comments (2)
calico-enterprise_versioned_docs/version-3.23-2/releases.json:7
- The operator version is set to v1.42.5, but this tag does not currently exist in tigera/operator (GitHub API returns 404 for tags/v1.42.5). This risks publishing incorrect version guidance if the final operator version differs.
"title": "v3.23.2",
"tigera-operator": {
"version": "v1.42.5",
"image": "tigera/operator",
"registry": "quay.io"
calico-enterprise_versioned_docs/version-3.23-2/release-notes/index.mdx:279
- The 3.23.2 release notes still contain a placeholder bug-fix list item ("TBD"). This should be replaced with the actual bug fixes (or the entire subsection removed if there are none) before publishing the release notes.
### Calico Enterprise 3.23.2 bug fix release
August 20, 2026
#### Bug fixes
* TBD
Replaces the TBD bug fix list with 3 enhancements and 23 bug fixes, compiled from calico-private v3.23.1..release-calient-v3.23 and operator v1.42.4..release-v1.42. Corrects six third-party pins in releases.json against two sources: the release-calient-v3.23 defaults in release/internal/pinnedversion/enterprise.go plus third_party/*/Makefile, cross-checked against release-v1.42's config/enterprise_versions.yml. coreos-alertmanager v0.33.0 -> v0.33.1 coreos-prometheus v3.12.0 -> v3.13.2 eck-elasticsearch 8.19.16 -> 8.19.20 eck-kibana 8.19.16 -> 8.19.20 eck-elasticsearch-operator 2.16.0 -> 3.4.1 upstream-istio 1.28.1 -> 1.29.6 Neither calico-private v3.23.2 nor operator v1.42.5 is tagged yet, so these values come from branch heads and the tigera-operator version is unverified. Re-run the version check after both tags exist. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.
Suppressed comments (2)
calico-enterprise_versioned_docs/version-3.23-2/release-notes/index.mdx:293
- This bug-fix entry says the bundled Envoy Gateway was updated to v1.8.2, but this docs stream’s
variables.jssetsenvoyVersionto 1.8.3 (and ingress-gateway docs reference$[envoyVersion]). Please reconcile these so the documented Envoy Gateway version is consistent across the docs.
* Fixed the Calico Ingress Gateway control plane crash-looping on clusters whose Gateway API CRD set omits `ListenerSet`, `TLSRoute`, or `BackendTLSPolicy`, such as OpenShift. The bundled Envoy Gateway is updated to v1.8.2.
calico-enterprise_versioned_docs/version-3.23-2/release-notes/index.mdx:291
- Two of these 3.23.2 bug-fix bullets (UDP return traffic for SNAT’d egress; service account issuer change) correspond to items still listed under the 3.23.1 “Known issues” section as “A fix is planned for an upcoming patch release” (same file, lines 263–264). Now that 3.23.2 is documented here, those 3.23.1 known-issues bullets should be updated to avoid conflicting guidance for readers.
* Fixed HostEndpoint policy blocking UDP return traffic for SNAT'd pod egress in the eBPF dataplane.
* Fixed Linseed rejecting valid service account tokens after a cluster's service account issuer changed. Unrecognized issuers are now validated via TokenReview.
Starter PR for the Calico Enterprise 3.23.2 patch release. It adds the release to the 3.23-2 docs stream and changes three files: releases.json, variables.js, and release-notes/index.mdx.
Ticket: https://tigera.atlassian.net/browse/DOCS-3000
Left to do, by Delivery Engineering:
Two things to flag: