DOCS-2965: Publish Calico Enterprise 3.23.1 by ctauchen · Pull Request #2814 · tigera/docs

ctauchen · 2026-07-01T15:46:34Z

Product Version(s):

Issue:

Link to docs preview:

SME review:

An SME has approved this change.

DOCS review:

A member of the docs team has approved this change.

Additional information:

Merge checklist:

Deploy preview inspected wherever changes were made
Build completed successfully
Test have passed

Promote the 3.23 (3.23-2) doc set from early preview to the GA "latest" version, mirroring the 3.22.1 publish (#2474): - releases.json: prepend v3.23.1 (operator v1.42.3, calico v3.32, all tigera product components -> v3.23.1; coreos/eck/upstream-istio and the tigera elasticsearch/kibana images kept at v3.23.0-2.0). - version-3.23-2 variables.js: releaseTitle/baseUrl(->latest)/filesUrl/ chart_version_name -> 3.23.1. - version-3.22-2 variables.js: baseUrl demoted to /calico-enterprise/3.22. - docusaurus.config.js: lastVersion -> 3.23-2; 3.23-2 -> "3.23 (latest)"; demote 3.22; drop 3.20 from the built versions. - archive.md: 3.23 latest, demote 3.22, move 3.20 to the Netlify archive. - Remove version-3.23-1 (EP1) docs + sidebar (mirrors the 3.22 ep1 removal). - release-notes: drop the early-preview banner and add the 3.23.1 GA section (content to be filled in).

The 3.23.1 GA publish should only touch release/version metadata (mirrors the 3.22.1 publish #2474, 6 files). Removing the 3.23 EP1 docs is a separate change (the 3.22 EP1 removal was its own PR around the EP2 cut, not part of GA), so restore version-3.23-1 + sidebar + versions.json here and handle the deletion in a dedicated PR.

In both the next tree and version-3.23-2: remove the 3.20 rows (3.20 is dropped from the built versions) and set 3.23 ranges — kOps 1.33-1.35, kubeadm 1.34-1.36, OpenShift 4.19-4.22, RKE2 1.34-1.36. AKS/EKS/GKE unchanged (they track upstream kubeadm); MKE/RKE/TKG only drop 3.20.

New VKS section above TKG (MKE-style table) plus a TOC entry, in both the next tree and version-3.23-2.

netlify · 2026-07-01T15:46:39Z

✅ Deploy Preview succeeded!

Name	Link
🔨 Latest commit	`f2c592d`
🔍 Latest deploy log	https://app.netlify.com/projects/tigera/deploys/6a4c32a8fa5bf10008339192
😎 Deploy Preview	https://deploy-preview-2814--tigera.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 86 (🔴 down 9 from production) Accessibility: 98 (no change from production) Best Practices: 92 (no change from production) SEO: 100 (no change from production) PWA: - View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

netlify · 2026-07-01T15:46:40Z

✅ Deploy Preview for calico-docs-preview-next ready!

Name	Link
🔨 Latest commit	`f2c592d`
🔍 Latest deploy log	https://app.netlify.com/projects/calico-docs-preview-next/deploys/6a4c32a8f9c9060008635228
😎 Deploy Preview	https://deploy-preview-2814--calico-docs-preview-next.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Copilot

Pull request overview

Publishes Calico Enterprise 3.23.1 as the GA “latest” docs stream, updates version routing, and refreshes platform compatibility data (including adding VKS support) while moving CE 3.20 off the main docs site into an archive link.

Changes:

Promote Calico Enterprise 3.23 to latest and adjust versioned doc routing/configuration (drop 3.20 from built versions).
Update compatibility matrices for CE 3.23 (including adding VKS provider support and removing 3.20 rows).
Add 3.23.1 release metadata (variables + releases.json) and update archive links.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
src/pages/archive.md	Adds CE 3.23 as the latest link; updates CE 3.22 URL; points CE 3.20 to archived Netlify site.
docusaurus.config.js	Updates CE version routing so 3.23 becomes `latest` and removes 3.20 from included versions.
calico-enterprise/getting-started/compatibility.mdx	Updates supported platform/version tables for the “next” CE docs; adds VKS.
calico-enterprise_versioned_docs/version-3.23-2/variables.js	Updates 3.23-2 variables to 3.23.1 GA and switches baseUrl/files URLs to GA locations.
calico-enterprise_versioned_docs/version-3.23-2/releases.json	Adds the v3.23.1 release payload and component versions.
calico-enterprise_versioned_docs/version-3.23-2/release-notes/index.mdx	Removes early preview banner and adds a GA 3.23.1 release entry.
calico-enterprise_versioned_docs/version-3.23-2/getting-started/compatibility.mdx	Updates compatibility tables for the published 3.23 docs stream; adds VKS.
calico-enterprise_versioned_docs/version-3.22-2/variables.js	Updates 3.22 docs to use `/calico-enterprise/3.22` baseUrl now that 3.23 is `latest`.

+  baseUrl: '/calico-enterprise/latest',
+  filesUrl: 'https://downloads.tigera.io/ee/v3.23.1',
  rhelPkgUrl: 'https://downloads.tigera.io/ee/rpms/' + releases[0].title.slice(0, 5),


+### Calico Enterprise 3.23.1 general availability release
+
+{/* TODO: release date */}
+
+Calico Enterprise 3.23.1 is now available as a general availability release.


+This release is supported for use in production.
+
+{/* TODO (fill after): add #### Breaking changes, #### Bug fixes, #### Known issues — omit any subsection with no items. */}
+


Adds a New features entry for VMware Kubernetes Service (VKS) install support and updates the 3.23.1 GA release date to July 6, 2026. Docs page tracked in #2816 (link left as (#) until merged). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Update the 3.23 Known issues entry: the eBPF data plane on EKS with Kubernetes 1.36 is currently not working, including in combination with Bottlerocket. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

The version-3.23-2 releases.json v3.23.1 entry was a partial copy of the 3.23.0-2.0 entry and never fully bumped. Reconcile it with calico-private calico/_data/versions.yml at the v3.23.1 and v3.23.0-2.0 release tags. v3.23.1 entry: - tigera-operator: v1.42.3 -> v1.42.4 - elasticsearch, elasticsearch-metrics, elasticsearch-operator, es-gateway, kibana: v3.23.0-2.0 -> v3.23.1 - eck-elasticsearch, eck-kibana: 8.19.15 -> 8.19.16 v3.23.0-2.0 entry: - tigera-operator: v1.42.2 -> v1.42.1 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

The LINK-CHECK step validates every absolute URL against the live server and fails the build on any dead link. Address the failures: - Add static/calico-enterprise/3.23/scripts/ (switch-active-operator.sh, install-calico-windows.ps1). The versioned static dir was never created at the 3.23 cut, though tmpScriptsURL points at /calico-enterprise/3.23. - Repoint the rotted kubernetes.io Condition link to the current .../kubernetes-api/definitions/condition-v1-meta/ in network.mdx (current + version-3.23-2); the old common-definitions path 404s. - Skip-list the breadcrumb category URLs for the kubevirt and calicoctl/review pages that are new in 3.23 (linkChecker.js), mirroring the existing OSS-Calico kubevirt rule. These clear once 3.23.1 publishes. Download-artifact URLs are intentionally NOT skip-listed: a missing package on downloads.tigera.io is a real publish failure and should break the build. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

The bare debs directory listing at downloads.tigera.io/ee/debs/v3.23/ returns 403 (directory index forbidden) even when the .deb packages inside are published, so it's a false positive. Individual package artifacts are left checked. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

operator-metrics-service-monitor.yaml is not yet on the download server. Marked VERY TEMPORARY inline; remove once 3.23.1 is published. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…er refresh Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…outgoing eBPF egress (CI-1988) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

The prometheus stack and fluentd CVE bumps shipped in 3.23.1 but the generated releases.json still carried the pre-bump versions: prometheus v3.11.3->v3.12.0, prometheus-operator/config-reloader v0.90.1->v0.91.0, alertmanager v0.32.0->v0.33.0, fluentd 1.19.2->1.19.3. Manual edit; matches release/internal/pinnedversion/enterprise.go at the 3.23.1 release commit. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…ge (CI-2009) Includes restart-based workaround. Fix (EV-6739) not yet in v3.23. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

sabags added 4 commits June 30, 2026 09:40

compatibility: add VKS provider (3.23 -> VKS 3.7, k8s 1.36)

21281e9

New VKS section above TKG (MKE-style table) plus a TOC entry, in both the next tree and version-3.23-2.

ctauchen requested a review from a team as a code owner July 1, 2026 15:46

Copilot AI review requested due to automatic review settings July 1, 2026 15:46

Copilot started reviewing on behalf of ctauchen July 1, 2026 15:46 View session

ctauchen mentioned this pull request Jul 1, 2026

Publish Calico Enterprise 3.23.1 #2812

Closed

Copilot AI reviewed Jul 1, 2026

View reviewed changes

ctauchen and others added 13 commits July 1, 2026 17:06

Update release notes for 3.23.1

e1355e2

Temporarily skip the 3.23.1 operator-metrics manifest URL

cd9ee2d

operator-metrics-service-monitor.yaml is not yet on the download server. Marked VERY TEMPORARY inline; remove once 3.23.1 is published. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Add 3.23.1 bug fixes: NCH data plane restriction and DNS trusted-serv…

0de5ced

…er refresh Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Add 3.23.1 known issue: HEP policy blocks UDP return traffic for NAT-…

30c3cdc

…outgoing eBPF egress (CI-1988) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Remove empty Enhancements section from 3.23.1 release details

01ea130

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Add 3.23.1 bug fix: Felix NFQUEUE reconnect deadlock (CORE-12966)

8f13240

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Add 3.23.1 known issue: stale trusted-issuer set after SA issuer chan…

f2c592d

…ge (CI-2009) Includes restart-based workaround. Fix (EV-6739) not yet in v3.23. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

sujeet-kr merged commit 46d18e2 into main Jul 7, 2026
11 checks passed

sujeet-kr deleted the publish/ce-3.23.1 branch July 7, 2026 00:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

DOCS-2965: Publish Calico Enterprise 3.23.1#2814

DOCS-2965: Publish Calico Enterprise 3.23.1#2814
sujeet-kr merged 17 commits into
mainfrom
publish/ce-3.23.1

ctauchen commented Jul 1, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

		This release is supported for use in production.

		{/* TODO (fill after): add #### Breaking changes, #### Bug fixes, #### Known issues — omit any subsection with no items. */}

Uh oh!

Conversation

ctauchen commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

netlify Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview succeeded!

Uh oh!

netlify Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for calico-docs-preview-next ready!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

ctauchen commented Jul 1, 2026 •

edited

Loading

netlify Bot commented Jul 1, 2026 •

edited

Loading

netlify Bot commented Jul 1, 2026 •

edited

Loading