Skip to content

Commit 0ecad7b

Browse files
authored
feat(tigera-operator): Update image to v1.40.0 (#1283)
Signed-off-by: Steve Hipwell <steve.hipwell@gmail.com>
1 parent 54a2398 commit 0ecad7b

29 files changed

+18055
-19699
lines changed

charts/tigera-operator/CHANGELOG.md

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,17 +14,23 @@
1414

1515
## [UNRELEASED]
1616

17+
## [v2.13.0] - 2025-11-05
18+
19+
### Changed
20+
21+
- Update the _Tigera Operator_ OCI image to [v1.40.0](https://github.com/tigera/operator/releases/tag/v1.40.0) (_Calico_ [v3.31.0](https://github.com/projectcalico/calico/releases/tag/v3.31.0)). ([#1283](https://github.com/stevehipwell/helm-charts/pull/1283)) _@stevehipwell_
22+
1723
## [v2.12.6] - 2025-11-05
1824

1925
### Changed
2026

21-
- Update the _Tigera Operator_ OCI image to [v1.38.7](https://github.com/tigera/operator/releases/tag/v1.38.7) (_Calico_ [v3.30.4](https://github.com/projectcalico/calico/releases/tag/v3.30.4 )). ([#1282](https://github.com/stevehipwell/helm-charts/pull/1282)) _@stevehipwell_
27+
- Update the _Tigera Operator_ OCI image to [v1.38.7](https://github.com/tigera/operator/releases/tag/v1.38.7) (_Calico_ [v3.30.4](https://github.com/projectcalico/calico/releases/tag/v3.30.4)). ([#1282](https://github.com/stevehipwell/helm-charts/pull/1282)) _@stevehipwell_
2228

2329
## [v2.12.5] - 2025-09-01
2430

2531
### Changed
2632

27-
- Update the _Tigera Operator_ OCI image to [v1.38.6](https://github.com/tigera/operator/releases/tag/v1.38.6) (_Calico_ [v3.30.3](https://github.com/projectcalico/calico/releases/tag/v3.30.3 )). ([#1242](https://github.com/stevehipwell/helm-charts/pull/1242)) _@stevehipwell_
33+
- Update the _Tigera Operator_ OCI image to [v1.38.6](https://github.com/tigera/operator/releases/tag/v1.38.6) (_Calico_ [v3.30.3](https://github.com/projectcalico/calico/releases/tag/v3.30.3)). ([#1242](https://github.com/stevehipwell/helm-charts/pull/1242)) _@stevehipwell_
2834

2935
## [v2.12.4] - 2025-08-11
3036

@@ -637,6 +643,7 @@
637643
RELEASE LINKS
638644
-->
639645
[UNRELEASED]: https://github.com/stevehipwell/helm-charts/tree/main/charts/tigera-operator
646+
[v2.13.0]: https://github.com/stevehipwell/helm-charts/releases/tag/tigera-operator-2.13.0
640647
[v2.12.6]: https://github.com/stevehipwell/helm-charts/releases/tag/tigera-operator-2.12.6
641648
[v2.12.5]: https://github.com/stevehipwell/helm-charts/releases/tag/tigera-operator-2.12.5
642649
[v2.12.4]: https://github.com/stevehipwell/helm-charts/releases/tag/tigera-operator-2.12.4

charts/tigera-operator/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@ apiVersion: v2
22
name: tigera-operator
33
description: Helm chart to install the Tigera Operator for managing Calico.
44
type: application
5-
version: 2.12.6
6-
appVersion: 1.38.7
5+
version: 2.13.0
6+
appVersion: 1.40.0
77
keywords:
88
- kubernetes
99
- cni

charts/tigera-operator/README.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# tigera-operator
22

3-
![Version: 2.12.6](https://img.shields.io/badge/Version-2.12.6-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.38.7](https://img.shields.io/badge/AppVersion-1.38.7-informational?style=flat-square)
3+
![Version: 2.13.0](https://img.shields.io/badge/Version-2.13.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.40.0](https://img.shields.io/badge/AppVersion-1.40.0-informational?style=flat-square)
44

55
The [Tigera Operator](https://www.tigera.io/) is a Kubernetes operator which manages the lifecycle of a [Calico](https://www.tigera.io/project-calico/) or [Calico Enterprise](https://www.tigera.io/tigera-products/calico-enterprise/) installation on Kubernetes. Its goal is to make installation, upgrades, and ongoing lifecycle management of _Calico_ and _Calico Enterprise_ as simple and reliable as possible.
66

@@ -27,15 +27,15 @@ It is possible to use the _Tigera Operator_ for other use-cases by installing ad
2727
To install the chart using the recommended OCI method you can use the following command.
2828

2929
```shell
30-
helm upgrade --install tigera-operator oci://ghcr.io/stevehipwell/helm-charts/tigera-operator --version 2.12.6
30+
helm upgrade --install tigera-operator oci://ghcr.io/stevehipwell/helm-charts/tigera-operator --version 2.13.0
3131
```
3232

3333
#### Verification
3434

3535
As the OCI chart release is signed by [Cosign](https://github.com/sigstore/cosign) you can verify the chart before installing it by running the following command.
3636

3737
```shell
38-
cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp 'https://github\.com/action-stars/helm-workflows/\.github/workflows/release\.yaml@.+' --certificate-github-workflow-repository stevehipwell/helm-charts --certificate-github-workflow-name Release ghcr.io/stevehipwell/helm-charts/tigera-operator:2.12.6
38+
cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp 'https://github\.com/action-stars/helm-workflows/\.github/workflows/release\.yaml@.+' --certificate-github-workflow-repository stevehipwell/helm-charts --certificate-github-workflow-name Release ghcr.io/stevehipwell/helm-charts/tigera-operator:2.13.0
3939
```
4040

4141
### Non-OCI Repository
@@ -44,7 +44,7 @@ Alternatively you can use the legacy non-OCI method via the following commands.
4444

4545
```shell
4646
helm repo add stevehipwell https://stevehipwell.github.io/helm-charts/
47-
helm upgrade --install tigera-operator stevehipwell/tigera-operator --version 2.12.6
47+
helm upgrade --install tigera-operator stevehipwell/tigera-operator --version 2.13.0
4848
```
4949

5050
## Values

charts/tigera-operator/crds/apiservers.operator.tigera.io.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ spec:
4040
properties:
4141
apiServerDeployment:
4242
description: |-
43-
APIServerDeployment configures the calico-apiserver (or tigera-apiserver in Enterprise) Deployment. If
43+
APIServerDeployment configures the calico-apiserver Deployment. If
4444
used in conjunction with ControlPlaneNodeSelector or ControlPlaneTolerations, then these overrides
4545
take precedence.
4646
properties:

charts/tigera-operator/crds/calico/bgpconfigurations.crd.projectcalico.org.yaml

Lines changed: 6 additions & 72 deletions
Original file line numberDiff line numberDiff line change
@@ -15,163 +15,97 @@ spec:
1515
- name: v1
1616
schema:
1717
openAPIV3Schema:
18-
description: BGPConfiguration contains the configuration for any BGP routing.
1918
properties:
2019
apiVersion:
21-
description: |-
22-
APIVersion defines the versioned schema of this representation of an object.
23-
Servers should convert recognized schemas to the latest internal value, and
24-
may reject unrecognized values.
25-
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
2620
type: string
2721
kind:
28-
description: |-
29-
Kind is a string value representing the REST resource this object represents.
30-
Servers may infer this from the endpoint the client submits requests to.
31-
Cannot be updated.
32-
In CamelCase.
33-
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
3422
type: string
3523
metadata:
3624
type: object
3725
spec:
38-
description: BGPConfigurationSpec contains the values of the BGP configuration.
3926
properties:
4027
asNumber:
41-
description: 'ASNumber is the default AS number used by a node. [Default: 64512]'
4228
format: int32
4329
type: integer
4430
bindMode:
45-
description: |-
46-
BindMode indicates whether to listen for BGP connections on all addresses (None)
47-
or only on the node's canonical IP address Node.Spec.BGP.IPvXAddress (NodeIP).
48-
Default behaviour is to listen for BGP connections on all addresses.
4931
type: string
5032
communities:
51-
description: Communities is a list of BGP community values and their arbitrary names for tagging routes.
5233
items:
53-
description: Community contains standard or large community value and its name.
5434
properties:
5535
name:
56-
description: Name given to community value.
5736
type: string
5837
value:
59-
description: |-
60-
Value must be of format `aa:nn` or `aa:nn:mm`.
61-
For standard community use `aa:nn` format, where `aa` and `nn` are 16 bit number.
62-
For large community use `aa:nn:mm` format, where `aa`, `nn` and `mm` are 32 bit number.
63-
Where, `aa` is an AS Number, `nn` and `mm` are per-AS identifier.
6438
pattern: ^(\d+):(\d+)$|^(\d+):(\d+):(\d+)$
6539
type: string
6640
type: object
6741
type: array
6842
ignoredInterfaces:
69-
description: IgnoredInterfaces indicates the network interfaces that needs to be excluded when reading device routes.
7043
items:
7144
type: string
7245
type: array
7346
listenPort:
74-
description: ListenPort is the port where BGP protocol should listen. Defaults to 179
7547
maximum: 65535
7648
minimum: 1
7749
type: integer
7850
localWorkloadPeeringIPV4:
79-
description: |-
80-
The virtual IPv4 address of the node with which its local workload is expected to peer.
81-
It is recommended to use a link-local address.
8251
type: string
8352
localWorkloadPeeringIPV6:
84-
description: |-
85-
The virtual IPv6 address of the node with which its local workload is expected to peer.
86-
It is recommended to use a link-local address.
8753
type: string
8854
logSeverityScreen:
89-
description: 'LogSeverityScreen is the log severity above which logs are sent to the stdout. [Default: INFO]'
9055
type: string
9156
nodeMeshMaxRestartTime:
92-
description: |-
93-
Time to allow for software restart for node-to-mesh peerings. When specified, this is configured
94-
as the graceful restart timeout. When not specified, the BIRD default of 120s is used.
95-
This field can only be set on the default BGPConfiguration instance and requires that NodeMesh is enabled
9657
type: string
9758
nodeMeshPassword:
98-
description: |-
99-
Optional BGP password for full node-to-mesh peerings.
100-
This field can only be set on the default BGPConfiguration instance and requires that NodeMesh is enabled
10159
properties:
10260
secretKeyRef:
103-
description: Selects a key of a secret in the node pod's namespace.
10461
properties:
10562
key:
106-
description: The key of the secret to select from. Must be a valid secret key.
10763
type: string
10864
name:
10965
default: ""
110-
description: |-
111-
Name of the referent.
112-
This field is effectively required, but due to backwards compatibility is
113-
allowed to be empty. Instances of this type with an empty value here are
114-
almost certainly wrong.
115-
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
11666
type: string
11767
optional:
118-
description: Specify whether the Secret or its key must be defined
11968
type: boolean
12069
required:
12170
- key
12271
type: object
12372
x-kubernetes-map-type: atomic
12473
type: object
12574
nodeToNodeMeshEnabled:
126-
description: 'NodeToNodeMeshEnabled sets whether full node to node BGP mesh is enabled. [Default: true]'
12775
type: boolean
12876
prefixAdvertisements:
129-
description: PrefixAdvertisements contains per-prefix advertisement configuration.
13077
items:
131-
description: PrefixAdvertisement configures advertisement properties for the specified CIDR.
13278
properties:
13379
cidr:
134-
description: CIDR for which properties should be advertised.
13580
type: string
13681
communities:
137-
description: |-
138-
Communities can be list of either community names already defined in `Specs.Communities` or community value of format `aa:nn` or `aa:nn:mm`.
139-
For standard community use `aa:nn` format, where `aa` and `nn` are 16 bit number.
140-
For large community use `aa:nn:mm` format, where `aa`, `nn` and `mm` are 32 bit number.
141-
Where,`aa` is an AS Number, `nn` and `mm` are per-AS identifier.
14282
items:
14383
type: string
14484
type: array
14585
type: object
14686
type: array
14787
serviceClusterIPs:
148-
description: |-
149-
ServiceClusterIPs are the CIDR blocks from which service cluster IPs are allocated.
150-
If specified, Calico will advertise these blocks, as well as any cluster IPs within them.
15188
items:
152-
description: ServiceClusterIPBlock represents a single allowed ClusterIP CIDR block.
15389
properties:
15490
cidr:
15591
type: string
15692
type: object
15793
type: array
15894
serviceExternalIPs:
159-
description: |-
160-
ServiceExternalIPs are the CIDR blocks for Kubernetes Service External IPs.
161-
Kubernetes Service ExternalIPs will only be advertised if they are within one of these blocks.
16295
items:
163-
description: ServiceExternalIPBlock represents a single allowed External IP CIDR block.
16496
properties:
16597
cidr:
16698
type: string
16799
type: object
168100
type: array
101+
serviceLoadBalancerAggregation:
102+
default: Enabled
103+
enum:
104+
- Enabled
105+
- Disabled
106+
type: string
169107
serviceLoadBalancerIPs:
170-
description: |-
171-
ServiceLoadBalancerIPs are the CIDR blocks for Kubernetes Service LoadBalancer IPs.
172-
Kubernetes Service status.LoadBalancer.Ingress IPs will only be advertised if they are within one of these blocks.
173108
items:
174-
description: ServiceLoadBalancerIPBlock represents a single allowed LoadBalancer IP CIDR block.
175109
properties:
176110
cidr:
177111
type: string

charts/tigera-operator/crds/calico/bgpfilters.crd.projectcalico.org.yaml

Lines changed: 0 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -17,29 +17,15 @@ spec:
1717
openAPIV3Schema:
1818
properties:
1919
apiVersion:
20-
description: |-
21-
APIVersion defines the versioned schema of this representation of an object.
22-
Servers should convert recognized schemas to the latest internal value, and
23-
may reject unrecognized values.
24-
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
2520
type: string
2621
kind:
27-
description: |-
28-
Kind is a string value representing the REST resource this object represents.
29-
Servers may infer this from the endpoint the client submits requests to.
30-
Cannot be updated.
31-
In CamelCase.
32-
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
3322
type: string
3423
metadata:
3524
type: object
3625
spec:
37-
description: BGPFilterSpec contains the IPv4 and IPv6 filter rules of the BGP Filter.
3826
properties:
3927
exportV4:
40-
description: The ordered set of IPv4 BGPFilter rules acting on exporting routes to a peer.
4128
items:
42-
description: BGPFilterRuleV4 defines a BGP filter rule consisting a single IPv4 CIDR block and a filter action for this CIDR.
4329
properties:
4430
action:
4531
type: string
@@ -69,9 +55,7 @@ spec:
6955
type: object
7056
type: array
7157
exportV6:
72-
description: The ordered set of IPv6 BGPFilter rules acting on exporting routes to a peer.
7358
items:
74-
description: BGPFilterRuleV6 defines a BGP filter rule consisting a single IPv6 CIDR block and a filter action for this CIDR.
7559
properties:
7660
action:
7761
type: string
@@ -101,9 +85,7 @@ spec:
10185
type: object
10286
type: array
10387
importV4:
104-
description: The ordered set of IPv4 BGPFilter rules acting on importing routes from a peer.
10588
items:
106-
description: BGPFilterRuleV4 defines a BGP filter rule consisting a single IPv4 CIDR block and a filter action for this CIDR.
10789
properties:
10890
action:
10991
type: string
@@ -133,9 +115,7 @@ spec:
133115
type: object
134116
type: array
135117
importV6:
136-
description: The ordered set of IPv6 BGPFilter rules acting on importing routes from a peer.
137118
items:
138-
description: BGPFilterRuleV6 defines a BGP filter rule consisting a single IPv6 CIDR block and a filter action for this CIDR.
139119
properties:
140120
action:
141121
type: string

0 commit comments

Comments
 (0)