Skip to content

DOCS-3000: Publish Calico Enterprise 3.23.2 - #2938

Open
ctauchen wants to merge 3 commits into
mainfrom
publish/ce-3.23.2
Open

DOCS-3000: Publish Calico Enterprise 3.23.2#2938
ctauchen wants to merge 3 commits into
mainfrom
publish/ce-3.23.2

Conversation

@ctauchen

@ctauchen ctauchen commented Aug 20, 2026

Copy link
Copy Markdown
Collaborator

Starter PR for the Calico Enterprise 3.23.2 patch release. It adds the release to the 3.23-2 docs stream and changes three files: releases.json, variables.js, and release-notes/index.mdx.

Ticket: https://tigera.atlassian.net/browse/DOCS-3000

Left to do, by Delivery Engineering:

  • Replace the TBD bug fix list with the real one.
  • Add known issues, if there are any.
  • Confirm the release date, currently August 20, 2026.
  • Run the third-party version sync from release-calient-v3.23, once that branch is ready.
  • Update the operator API reference, if it changed.

Two things to flag:

  • The operator version v1.42.5 is an expectation, not a verified value. It is not yet tagged in tigera/operator.
  • The deploy preview fails, and it will keep failing until the release artifacts are published. The link checker reports 45 dead links. All 45 are v3.23.2 files on downloads.tigera.io that return 403 today. There are no other failures, and the site build itself passes. Calico Enterprise latest is 3.23, which is why these links are checked at all.

@ctauchen
ctauchen requested a review from a team as a code owner August 20, 2026 19:09
Copilot AI lite review requested due to automatic review settings August 20, 2026 19:09
@netlify

netlify Bot commented Aug 20, 2026

Copy link
Copy Markdown

Deploy Preview for tigera failed. Why did it fail? →

Name Link
🔨 Latest commit c69d3d1
🔍 Latest deploy log https://app.netlify.com/projects/tigera/deploys/6a878daef72a060009790c85

@netlify

netlify Bot commented Aug 20, 2026

Copy link
Copy Markdown

Deploy Preview for calico-docs-preview-next ready!

Name Link
🔨 Latest commit c69d3d1
🔍 Latest deploy log https://app.netlify.com/projects/calico-docs-preview-next/deploys/6a878dae3bdd4500082f1de6
😎 Deploy Preview https://deploy-preview-2938--calico-docs-preview-next.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Starter documentation PR to begin publishing the Calico Enterprise 3.23.2 patch release content under calico-enterprise_versioned_docs/version-3.23-2/ by introducing the new release metadata, wiring versioned variables, and creating an initial release-notes section.

Changes:

  • Add a new top-of-list v3.23.2 entry in releases.json, bumping Tigera component versions from v3.23.1v3.23.2 and setting tigera-operator to v1.42.5.
  • Update variables.js to reference v3.23.2 (release title, download URL, and chart version name).
  • Append a 3.23.2 release-notes section dated Aug 20, 2026 with a placeholder bug-fix list.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File Description
calico-enterprise_versioned_docs/version-3.23-2/releases.json Introduces the new v3.23.2 release manifest and component/operator version pins.
calico-enterprise_versioned_docs/version-3.23-2/variables.js Updates versioned variables to align generated docs/download links with v3.23.2.
calico-enterprise_versioned_docs/version-3.23-2/release-notes/index.mdx Adds the initial 3.23.2 release-notes section (currently with placeholder bug fixes).

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment on lines +272 to +279
### Calico Enterprise 3.23.2 bug fix release

August 20, 2026

#### Bug fixes

* TBD

Comment on lines +3 to +8
"title": "v3.23.2",
"tigera-operator": {
"version": "v1.42.5",
"image": "tigera/operator",
"registry": "quay.io"
},
The 3.23 branch pins ENVOY_GATEWAY_VERSION = v1.8.3 in
third_party/envoy-gateway/Makefile. The docs still said 1.8.0.
Copilot AI review requested due to automatic review settings August 20, 2026 19:51

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.

Suppressed comments (2)

calico-enterprise_versioned_docs/version-3.23-2/releases.json:7

  • The operator version is set to v1.42.5, but this tag does not currently exist in tigera/operator (GitHub API returns 404 for tags/v1.42.5). This risks publishing incorrect version guidance if the final operator version differs.
    "title": "v3.23.2",
    "tigera-operator": {
      "version": "v1.42.5",
      "image": "tigera/operator",
      "registry": "quay.io"

calico-enterprise_versioned_docs/version-3.23-2/release-notes/index.mdx:279

  • The 3.23.2 release notes still contain a placeholder bug-fix list item ("TBD"). This should be replaced with the actual bug fixes (or the entire subsection removed if there are none) before publishing the release notes.
### Calico Enterprise 3.23.2 bug fix release

August 20, 2026

#### Bug fixes

* TBD

Replaces the TBD bug fix list with 3 enhancements and 23 bug fixes, compiled
from calico-private v3.23.1..release-calient-v3.23 and operator
v1.42.4..release-v1.42.

Corrects six third-party pins in releases.json against two sources: the
release-calient-v3.23 defaults in release/internal/pinnedversion/enterprise.go
plus third_party/*/Makefile, cross-checked against release-v1.42's
config/enterprise_versions.yml.

  coreos-alertmanager        v0.33.0 -> v0.33.1
  coreos-prometheus          v3.12.0 -> v3.13.2
  eck-elasticsearch          8.19.16 -> 8.19.20
  eck-kibana                 8.19.16 -> 8.19.20
  eck-elasticsearch-operator 2.16.0  -> 3.4.1
  upstream-istio             1.28.1  -> 1.29.6

Neither calico-private v3.23.2 nor operator v1.42.5 is tagged yet, so these
values come from branch heads and the tigera-operator version is unverified.
Re-run the version check after both tags exist.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings August 20, 2026 23:28

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.

Suppressed comments (2)

calico-enterprise_versioned_docs/version-3.23-2/release-notes/index.mdx:293

  • This bug-fix entry says the bundled Envoy Gateway was updated to v1.8.2, but this docs stream’s variables.js sets envoyVersion to 1.8.3 (and ingress-gateway docs reference $[envoyVersion]). Please reconcile these so the documented Envoy Gateway version is consistent across the docs.
* Fixed the Calico Ingress Gateway control plane crash-looping on clusters whose Gateway API CRD set omits `ListenerSet`, `TLSRoute`, or `BackendTLSPolicy`, such as OpenShift. The bundled Envoy Gateway is updated to v1.8.2.

calico-enterprise_versioned_docs/version-3.23-2/release-notes/index.mdx:291

  • Two of these 3.23.2 bug-fix bullets (UDP return traffic for SNAT’d egress; service account issuer change) correspond to items still listed under the 3.23.1 “Known issues” section as “A fix is planned for an upcoming patch release” (same file, lines 263–264). Now that 3.23.2 is documented here, those 3.23.1 known-issues bullets should be updated to avoid conflicting guidance for readers.
* Fixed HostEndpoint policy blocking UDP return traffic for SNAT'd pod egress in the eBPF dataplane.
* Fixed Linseed rejecting valid service account tokens after a cluster's service account issuer changed. Unrecognized issuers are now validated via TokenReview.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants