Preview v4.0.0-rc.0

Networking Core Module Release 4.0.0

Welcome to the latest release of the Networking module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This new major release updates Cilium to 1.18.11, Calico to 3.31.6, and introduces support for Kubernets 1.35.

Packages version 🚢

Component	Current Version	Previous Version
cilium	v1.18.11	v1.18.7
tigera-operator	v1.40.13	v1.40.3

Bug fixes 🐞

• [#105] Add whisker observability: enable Calico's Whisker observability UI and its required Goldmane flow aggregator as defaults in the tigera/on-prem package.
• [#107] Fix Calico Grafana dashboard: "CPU Usage" and "Memory Usage" metrics are now populated.

Breaking Changes 💔

• [#109] Remove Cilium Core Package: Cilium previously was provided in two variants: Core and Core+Hubble. The Core variant has been deprecated in favour of keeping a single package Core+Hubble.
• [#112] Rename ConfigMap: ConfigMaps holding Grafana Dashboards for Cilium and Hubble (kube-system/cilium-grafana-dashboard and kube-system/hubble-grafana-dashboard) have been renamed to follow the upstream names.

Update Guide 🦮

Tigera Calico On Premises

kustomize build katalog/tigera/on-prem | kubectl apply -f -

Cilium

Note

If you were using the core only variant of Cilium you will now get the one with Hubble instead.

If you were pointing to the core package (katalog/cilium/core) or the hubble package (katalog/cilium/hubble) directly, update the reference to katalog/cilium.

See the Breaking changes section for more details.

ConfigMaps holding Grafana Dashboards for Cilium have changed name to use the same as upstream. If you are using kubectl apply you need to manually delete the old configmaps before applying the new ones:

kubectl delete configmap -n kube-system cilium-grafana-dashboard hubble-grafana-dashboard

Apply the Kustomize project with the new version:

kustomize build katalog/cilium | kubectl apply -f -

Important

The new single package introduces a cyclic dependency between Cilium and cert-manager. Hubble (deployed together with Cilium) requires cert-manager, and cert-manager requires at least some nodes to be ready (CNI working) to be scheduled.

You may need to adjust your deployment strategy while switching to the unified package.

For example, if you are using a tool that verifies dependencies (like Carvel kapp) you may apply cert-manager and cilium together in the same kapp deploy command.

If you are using plain kubectl apply instead, you will see some messages saying that the resources that require cert-manager (like Certificate, Issuer, etc.) are not being deployed. You will need to re-apply the cilium package after you've deployed cert-manager so Hubble works.

Release v3.1.0

Networking Core Module Release v3.1.0

Welcome to the latest release of the Networking module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This release updates the Tigera Operator to version 1.40.3 (Calico v3.31.3), Cilium to v1.18.7 and adds support for Kubernetes 1.34.

Component Images 🚢

Component	Supported Version	Previous Version
cilium	v1.18.7	v1.18.1
tigera-operator	v1.40.3	v1.38.6

Please refer the individual release notes to get detailed information on each release.

Bug fixes 🐞

• [#101] Hubble metrics not being scraped by Prometheus: fixed and issue with Prometheus not trusting the certficates of the Hubble metrics endpoint, and failing to scrape it in consequence triggering an alert of 100% targets down for the ServiceMonitor.

Breaking Changes 💔

None.

Update Guide 🦮

Process

1. Just deploy as usual:

kustomize build katalog/tigera/on-prem | kubectl apply -f -
# OR
kustomize build katalog/cilium | kubectl apply -f -

Preview v3.1.0-rc.2

Networking Core Module Release v3.1.0

Welcome to the latest release of the Networking module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This release updates the Tigera Operator to version 1.40.3 (Calico v3.31.3), Cilium to v1.18.7 and adds support for Kubernetes 1.34.

Component Images 🚢

Component	Supported Version	Previous Version
cilium	v1.18.7	v1.18.1
tigera-operator	v1.40.3	v1.38.6

Please refer the individual release notes to get detailed information on each release.

Bug fixes 🐞

• [#101] Hubble metrics not being scraped by Prometheus: fixed and issue with Prometheus not trusting the certficates of the Hubble metrics endpoint, and failing to scrape it in consequence triggering an alert of 100% targets down for the ServiceMonitor.

Breaking Changes 💔

None.

Update Guide 🦮

Process

1. Just deploy as usual:

kustomize build katalog/tigera/on-prem | kubectl apply -f -
# OR
kustomize build katalog/cilium | kubectl apply -f -

Preview v3.1.0-rc.1

Networking Core Module Release v3.1.0

Welcome to the latest release of the Networking module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This release updates the Tigera Operator to version 1.40.3 (Calico v3.31.3), Cilium to v1.19.0 and adds support for Kubernetes 1.34. Cilium TBD

Component Images 🚢

Component	Supported Version	Previous Version
cilium	v1.19.0	v1.18.1
tigera-operator	v1.40.3	v1.38.6

Please refer the individual release notes to get detailed information on each release.

Bug fixes 🐞

• [#101] Hubble metrics not being scraped by Prometheus: fixed and issue with Prometheus not trusting the certficates of the Hubble metrics endpoint, and failing to scrape it in consequence triggering an alert of 100% targets down for the ServiceMonitor.

Breaking Changes 💔

• Cilium v1.19.0 introduces some changes to Network Policies, Cluster Mesh, LoadBalancer IPAM or BGP that may require intervention. These changes do not impact the module's out-of-the-box configuration, but users may have to adjust custom configuration if present.

Update Guide 🦮

Process

1. Just deploy as usual:

kustomize build katalog/tigera/on-prem | kubectl apply -f -
# OR
kustomize build katalog/cilium | kubectl apply -f -

Preview v3.1.0-rc.0-tigera

Networking Core Module Release v3.1.0

⚠️ Do not use this tag, it is only used to run Tigera in e2e tests while waiting for the CIlium package update.

Welcome to the latest release of the Networking module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This release updates the Tigera Operator to version 1.40.3 (Calico v3.31.3) and adds support for Kubernetes 1.34. Cilium TBD

Component Images 🚢

Component	Supported Version	Previous Version
cilium	TDB	TDB
tigera-operator	v1.40.3	v1.38.6

Please refer the individual release notes to get detailed information on each release.

Bug fixes 🐞

• [#101] Hubble metrics not being scraped by Prometheus: fixed and issue with Prometheus not trusting the certficates of the Hubble metrics endpoint, and failing to scrape it in consequence triggering an alert of 100% targets down for the ServiceMonitor.

Breaking Changes 💔

TBD

Update Guide 🦮

Process

1. Just deploy as usual:

kustomize build katalog/tigera/on-prem | kubectl apply -f -
# OR
kustomize build katalog/cilium | kubectl apply -f -

Release v3.0.0

Networking Core Module Release v3.0.0

Welcome to the latest release of the Networking module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This release updates both the Tigera Operator to version 1.38.6 (Calico v3.30.3) and Cilium to version 1.18.1, providing enhanced networking capabilities, official Kubernetes 1.33 support, improved GatewayAPI features, and robust testing infrastructure.

Component Images 🚢

Component	Supported Version	Previous Version
cilium	v1.18.1	v1.17.2
tigera-operator	v1.38.6	v1.38.0

Please refer the individual release notes to get detailed information on each release.

Breaking Changes 💔

• REMOVED: ip-masq package has been completely removed from the module. Users requiring IP masquerading functionality should implement their own solution or use CNI-native features.

Update Guide 🦮

Process

1. Just deploy as usual:

kustomize build katalog/tigera/on-prem | kubectl apply -f -
# OR
kustomize build katalog/cilium | kubectl apply -f -

Preview v3.0.0-rc.1

Networking Core Module Release v3.0.0

Welcome to the latest release of the Networking module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This release updates both the Tigera Operator to version 1.38.6 (Calico v3.30.3) and Cilium to version 1.18.1, providing enhanced networking capabilities, official Kubernetes 1.33 support, improved GatewayAPI features, and robust testing infrastructure.

Component Images 🚢

Component	Supported Version	Previous Version
cilium	v1.18.1	v1.17.2
tigera-operator	v1.38.6	v1.38.0

Please refer the individual release notes to get detailed information on each release.

Breaking Changes 💔

• REMOVED: ip-masq package has been completely removed from the module. Users requiring IP masquerading functionality should implement their own solution or use CNI-native features.

Update Guide 🦮

Process

1. Just deploy as usual:

kustomize build katalog/tigera/on-prem | kubectl apply -f -
# OR
kustomize build katalog/cilium | kubectl apply -f -

Preview v3.0.0-rc.0

Networking Core Module Release v3.0.0

Welcome to the latest release of the Networking module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This release updates both the Tigera Operator to version 1.38.6 (Calico v3.30.3) and Cilium to version 1.18.1, providing enhanced networking capabilities, official Kubernetes 1.33 support, improved GatewayAPI features, and robust testing infrastructure.

Component Images 🚢

Component	Supported Version	Previous Version
cilium	v1.18.1	v1.17.2
tigera-operator	v1.38.6	v1.38.0

Please refer the individual release notes to get detailed information on each release.

Breaking Changes 💔

• REMOVED: ip-masq package has been completely removed from the module. Users requiring IP masquerading functionality should implement their own solution or use CNI-native features.

Update Guide 🦮

Process

1. Just deploy as usual:

kustomize build katalog/tigera/on-prem | kubectl apply -f -
# OR
kustomize build katalog/cilium | kubectl apply -f -

Release v2.2.0

Networking Core Module Release v2.2.0

Welcome to the latest release of the Networking module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This release updates the Calico package to the latest version available for new features, bug fixes and improved security and introduces compatibility with Kubernetes 1.32, exiting from tech preview.

Bug fixes 🐞

• None

Component Images 🚢

Component	Supported Version	Previous Version
cilium	v1.17.2	No update
ip-masq	v2.8.0	No update
tigera-operator	v1.38.0	v1.36.5

Please refer the individual release notes to get detailed information on each release.

Breaking Changes 💔

• None

Update Guide 🦮

Tigera Operator: update process

1. Deploy CRDs first:

kubectl apply --server-side -f ./katalog/tigera/operator/operator-crds.yaml

2. Build kustomize and apply:

kustomize build katalog/tigera/on-prem | kubectl apply --server-side -f -

Release v2.1.0

Networking Core Module Release v2.1.0

Welcome to the latest release of the Networking module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This release updates several packages to the latest versions available for new features, bug fixes and improved security, it also drops compatibility with Kubernetes 1.28 and introduces compatibility with Kubernetes 1.32.

Bug fixes 🐞

• [#87] Extended Cilium's mTLS selfg-signed CA certificated duration to 10 years instead of having them expire before the peer certificates to avoid breaking communication. See the update guide below for more information on additional steps needed after updating.

Component Images 🚢

Component	Supported Version	Previous Version
cilium	v1.17.2	v1.16.3
ip-masq	v2.8.0	No update
tigera-operator	v1.36.5	v1.36.1

Please refer the individual release notes to get detailed information on each release.

Breaking Changes 💔

• None

Update Guide 🦮

Process

1. Just deploy as usual:

kustomize build katalog/tigera/on-prem | kubectl apply --server-side -f -
# OR
kustomize build katalog/cilium | kubectl apply --server-side -f -

2. (Cilium only) After applying the new version, you will need to manually trigger the renewal of the mTLS certificates for Cilium:

cmctl renew -n kube-system hubble-relay-client-certs
cmctl renew -n kube-system hubble-server-certs

Note: you will need cert-manager's CLI cmctl installed.