Skip to content

Conversation

@ctauchen
Copy link
Collaborator

  • Change bad link
  • Add docs for Istio Ambient Mode
  • Prepare for CE release 3.22 EP3
  • Add tech preview status for Istio Ambient Mode
  • Update release date and add known issue

Product Version(s):

Issue:

Link to docs preview:

SME review:

  • An SME has approved this change.

DOCS review:

  • A member of the docs team has approved this change.

Additional information:

Merge checklist:

  • Deploy preview inspected wherever changes were made
  • Build completed successfully
  • Test have passed

Copilot AI review requested due to automatic review settings December 22, 2025 19:34
@ctauchen ctauchen requested a review from a team as a code owner December 22, 2025 19:34
@netlify
Copy link

netlify bot commented Dec 22, 2025

Deploy Preview succeeded!

Name Link
🔨 Latest commit 1e39265
🔍 Latest deploy log https://app.netlify.com/projects/tigera/deploys/694a5b049ded2b0008ef06e0
😎 Deploy Preview https://deploy-preview-2443--tigera.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 70 (🔴 down 1 from production)
Accessibility: 90 (no change from production)
Best Practices: 92 (no change from production)
SEO: 92 (no change from production)
PWA: -
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link

netlify bot commented Dec 22, 2025

Deploy Preview for calico-docs-preview-next ready!

Name Link
🔨 Latest commit 1e39265
🔍 Latest deploy log https://app.netlify.com/projects/calico-docs-preview-next/deploys/694a5b05700ffb000822b4dd
😎 Deploy Preview https://deploy-preview-2443--calico-docs-preview-next.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

}
}
},
{
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is correct. Somehow the EP1 stuff got removed in an earlier release.

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR prepares the documentation for the Calico Enterprise 3.22.0-3.0 (EP3) early preview release. The main changes include adding comprehensive documentation for the new Istio Ambient Mode tech preview feature, updating version metadata and release information, and fixing broken Rancher documentation links across multiple product versions.

Key changes:

  • Istio Ambient Mode documentation: New comprehensive documentation for deploying and using Istio in ambient mode, including overview, deployment instructions, troubleshooting, and limitations
  • Version updates: Release metadata updated from 3.22.0-2.0 to 3.22.0-3.0 across version strings, file URLs, and component versions
  • Link fixes: Rancher documentation URLs corrected across five versions (current + 4 versioned releases)

Reviewed changes

Copilot reviewed 17 out of 17 changed files in this pull request and generated 7 comments.

Show a summary per file
File Description
sidebars-calico-enterprise.js Added Istio Ambient Mode section to compliance sidebar for Calico Enterprise current version
sidebars-calico-cloud.js Added Istio Ambient Mode section to compliance sidebar for Calico Cloud current version
calico-enterprise_versioned_sidebars/version-3.22-2-sidebars.json Added Istio Ambient Mode section to compliance sidebar for version 3.22-2
calico-enterprise_versioned_docs/version-3.22-2/variables.js Updated version strings from 3.22.0-2.0 to 3.22.0-3.0
calico-enterprise_versioned_docs/version-3.22-2/releases.json Added complete release metadata entry for v3.22.0-3.0 with all component versions
calico-enterprise_versioned_docs/version-3.22-2/release-notes/index.mdx Added release notes for EP3 including Istio feature description and known issues
calico-enterprise_versioned_docs/version-3.22-2/compliance/istio/deploy-istio-ambient.mdx New deployment guide for Istio Ambient Mode in version 3.22-2
calico-enterprise_versioned_docs/version-3.22-2/compliance/istio/about-istio-ambient.mdx New overview documentation explaining Istio Ambient Mode in version 3.22-2
calico-enterprise_versioned_docs/version-3.22-2/getting-started/install-on-clusters/rancher.mdx Fixed broken Rancher documentation link
calico-enterprise_versioned_docs/version-3.21-2/getting-started/install-on-clusters/rancher.mdx Fixed broken Rancher documentation link
calico-enterprise_versioned_docs/version-3.20-2/getting-started/install-on-clusters/rancher.mdx Fixed broken Rancher documentation link
calico-enterprise_versioned_docs/version-3.19-2/getting-started/install-on-clusters/rancher.mdx Fixed broken Rancher documentation link
calico-enterprise/getting-started/install-on-clusters/rancher.mdx Fixed broken Rancher documentation link in current version
calico-enterprise/compliance/istio/deploy-istio-ambient.mdx New deployment guide for Istio Ambient Mode in current version
calico-enterprise/compliance/istio/about-istio-ambient.mdx New overview documentation explaining Istio Ambient Mode in current version
calico-cloud/compliance/istio/deploy-istio-ambient.mdx New deployment guide for Istio Ambient Mode in Calico Cloud
calico-cloud/compliance/istio/about-istio-ambient.mdx New overview documentation explaining Istio Ambient Mode in Calico Cloud


## Additional resources
* [Overview of Istio ambient mode](https://istio.io/latest/docs/ambient/overview/).
* [Ambient and Kubernetes NetworkPolicy](https://istio.io/latest/docs/ambient/usage/networkpolicy/)
Copy link

Copilot AI Dec 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The link text uses inconsistent capitalization compared to the first link. The first link uses lowercase "mode" while the second uses capitalized "NetworkPolicy". For consistency, consider using "Ambient and Kubernetes network policy" or updating the first link to match the title case pattern.

Suggested change
* [Ambient and Kubernetes NetworkPolicy](https://istio.io/latest/docs/ambient/usage/networkpolicy/)
* [Ambient and Kubernetes network policy](https://istio.io/latest/docs/ambient/usage/networkpolicy/)

Copilot uses AI. Check for mistakes.
Comment on lines 189 to 201
#### Enhancements

* TBD

#### Known issues

* If you use the nftables data plane with L7 features (WAF or L7 logging) on a platform without legacy iptables support, such as OpenShift 4.20, these capabilities will fail to initialize.
This occurs because some Calico images are missing the required nftables binaries and incorrectly rely on legacy iptables modules that have been removed from newer operating systems.
As a workaround, ensure your host platform has legacy iptables kernel modules installed and loaded until a full fix is delivered in an upcoming patch release.

#### Bug fixes

* TBD
Copy link

Copilot AI Dec 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The release notes contain placeholder content "TBD" (To Be Determined) for both Enhancements and Bug fixes sections. These placeholders should be replaced with actual content or removed before the release is published. If no enhancements or bug fixes are applicable, consider stating that explicitly rather than leaving TBD.

Copilot uses AI. Check for mistakes.
Comment on lines +145 to +155
```bash
ZTUNNEL_PODS=$(kubectl get pod -n calico-system \
-l app.kubernetes.io/name=ztunnel \
-o jsonpath='{.items[*].metadata.name}')
for P in $ZTUNNEL_PODS; do
echo "--- Checking logs for pod: $P ---"
kubectl logs $P -n calico-system 2>/dev/null | \
grep -i error | \
grep -i app1
done
Copy link

Copilot AI Dec 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The troubleshooting command includes a grep filter for "app1" which appears to be specific to a particular application rather than a generic troubleshooting approach. This filter should either be removed to show all errors, or the documentation should explain why filtering for "app1" is necessary and how users should adapt this for their own applications.

Copilot uses AI. Check for mistakes.
Comment on lines +145 to +155
```bash
ZTUNNEL_PODS=$(kubectl get pod -n calico-system \
-l app.kubernetes.io/name=ztunnel \
-o jsonpath='{.items[*].metadata.name}')
for P in $ZTUNNEL_PODS; do
echo "--- Checking logs for pod: $P ---"
kubectl logs $P -n calico-system 2>/dev/null | \
grep -i error | \
grep -i app1
done
Copy link

Copilot AI Dec 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The troubleshooting command includes a grep filter for "app1" which appears to be specific to a particular application rather than a generic troubleshooting approach. This filter should either be removed to show all errors, or the documentation should explain why filtering for "app1" is necessary and how users should adapt this for their own applications.

Copilot uses AI. Check for mistakes.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Istio Ambient mode isn't available in v3.22 EP2, are we ok adding this in the corresponding versioned docs? or do we want it just in latest

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We're calling it ep3 but using the ep2 docs publishing. structure. All ok.

Copy link
Member

@electricjesus electricjesus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

other than my concern about versioned docs, LGTM in terms of Istio Ambient mode

* We've improved the Service Graph for clusters that have a very high volume of flows. When a high volume of flows is detected for a time range, a new namespaced-focused experience provides quicker access to insights from the graph.
We've also added more feedback into the UI to keep you informed on the progress of graph computation.
* The namespace-focused experience will now also highlight namespaces that are estimated to take a long time to load with an orange indicator.
* We now support installation of $[prodname] on MKE 4k.
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@sabags lgtm

@danudey danudey merged commit 5e77034 into main Dec 23, 2025
10 of 11 checks passed
@danudey danudey deleted the publish/ce-3.22.0-3.0 branch December 23, 2025 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants