-
Notifications
You must be signed in to change notification settings - Fork 134
DOCS-2713: Publish Calico Enterprise 3.22 EP3 #2443
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
✅ Deploy Preview succeeded!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for calico-docs-preview-next ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
| } | ||
| } | ||
| }, | ||
| { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is correct. Somehow the EP1 stuff got removed in an earlier release.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR prepares the documentation for the Calico Enterprise 3.22.0-3.0 (EP3) early preview release. The main changes include adding comprehensive documentation for the new Istio Ambient Mode tech preview feature, updating version metadata and release information, and fixing broken Rancher documentation links across multiple product versions.
Key changes:
- Istio Ambient Mode documentation: New comprehensive documentation for deploying and using Istio in ambient mode, including overview, deployment instructions, troubleshooting, and limitations
- Version updates: Release metadata updated from 3.22.0-2.0 to 3.22.0-3.0 across version strings, file URLs, and component versions
- Link fixes: Rancher documentation URLs corrected across five versions (current + 4 versioned releases)
Reviewed changes
Copilot reviewed 17 out of 17 changed files in this pull request and generated 7 comments.
Show a summary per file
| File | Description |
|---|---|
| sidebars-calico-enterprise.js | Added Istio Ambient Mode section to compliance sidebar for Calico Enterprise current version |
| sidebars-calico-cloud.js | Added Istio Ambient Mode section to compliance sidebar for Calico Cloud current version |
| calico-enterprise_versioned_sidebars/version-3.22-2-sidebars.json | Added Istio Ambient Mode section to compliance sidebar for version 3.22-2 |
| calico-enterprise_versioned_docs/version-3.22-2/variables.js | Updated version strings from 3.22.0-2.0 to 3.22.0-3.0 |
| calico-enterprise_versioned_docs/version-3.22-2/releases.json | Added complete release metadata entry for v3.22.0-3.0 with all component versions |
| calico-enterprise_versioned_docs/version-3.22-2/release-notes/index.mdx | Added release notes for EP3 including Istio feature description and known issues |
| calico-enterprise_versioned_docs/version-3.22-2/compliance/istio/deploy-istio-ambient.mdx | New deployment guide for Istio Ambient Mode in version 3.22-2 |
| calico-enterprise_versioned_docs/version-3.22-2/compliance/istio/about-istio-ambient.mdx | New overview documentation explaining Istio Ambient Mode in version 3.22-2 |
| calico-enterprise_versioned_docs/version-3.22-2/getting-started/install-on-clusters/rancher.mdx | Fixed broken Rancher documentation link |
| calico-enterprise_versioned_docs/version-3.21-2/getting-started/install-on-clusters/rancher.mdx | Fixed broken Rancher documentation link |
| calico-enterprise_versioned_docs/version-3.20-2/getting-started/install-on-clusters/rancher.mdx | Fixed broken Rancher documentation link |
| calico-enterprise_versioned_docs/version-3.19-2/getting-started/install-on-clusters/rancher.mdx | Fixed broken Rancher documentation link |
| calico-enterprise/getting-started/install-on-clusters/rancher.mdx | Fixed broken Rancher documentation link in current version |
| calico-enterprise/compliance/istio/deploy-istio-ambient.mdx | New deployment guide for Istio Ambient Mode in current version |
| calico-enterprise/compliance/istio/about-istio-ambient.mdx | New overview documentation explaining Istio Ambient Mode in current version |
| calico-cloud/compliance/istio/deploy-istio-ambient.mdx | New deployment guide for Istio Ambient Mode in Calico Cloud |
| calico-cloud/compliance/istio/about-istio-ambient.mdx | New overview documentation explaining Istio Ambient Mode in Calico Cloud |
|
|
||
| ## Additional resources | ||
| * [Overview of Istio ambient mode](https://istio.io/latest/docs/ambient/overview/). | ||
| * [Ambient and Kubernetes NetworkPolicy](https://istio.io/latest/docs/ambient/usage/networkpolicy/) |
Copilot
AI
Dec 22, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The link text uses inconsistent capitalization compared to the first link. The first link uses lowercase "mode" while the second uses capitalized "NetworkPolicy". For consistency, consider using "Ambient and Kubernetes network policy" or updating the first link to match the title case pattern.
| * [Ambient and Kubernetes NetworkPolicy](https://istio.io/latest/docs/ambient/usage/networkpolicy/) | |
| * [Ambient and Kubernetes network policy](https://istio.io/latest/docs/ambient/usage/networkpolicy/) |
| #### Enhancements | ||
|
|
||
| * TBD | ||
|
|
||
| #### Known issues | ||
|
|
||
| * If you use the nftables data plane with L7 features (WAF or L7 logging) on a platform without legacy iptables support, such as OpenShift 4.20, these capabilities will fail to initialize. | ||
| This occurs because some Calico images are missing the required nftables binaries and incorrectly rely on legacy iptables modules that have been removed from newer operating systems. | ||
| As a workaround, ensure your host platform has legacy iptables kernel modules installed and loaded until a full fix is delivered in an upcoming patch release. | ||
|
|
||
| #### Bug fixes | ||
|
|
||
| * TBD |
Copilot
AI
Dec 22, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The release notes contain placeholder content "TBD" (To Be Determined) for both Enhancements and Bug fixes sections. These placeholders should be replaced with actual content or removed before the release is published. If no enhancements or bug fixes are applicable, consider stating that explicitly rather than leaving TBD.
| ```bash | ||
| ZTUNNEL_PODS=$(kubectl get pod -n calico-system \ | ||
| -l app.kubernetes.io/name=ztunnel \ | ||
| -o jsonpath='{.items[*].metadata.name}') | ||
| for P in $ZTUNNEL_PODS; do | ||
| echo "--- Checking logs for pod: $P ---" | ||
| kubectl logs $P -n calico-system 2>/dev/null | \ | ||
| grep -i error | \ | ||
| grep -i app1 | ||
| done |
Copilot
AI
Dec 22, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The troubleshooting command includes a grep filter for "app1" which appears to be specific to a particular application rather than a generic troubleshooting approach. This filter should either be removed to show all errors, or the documentation should explain why filtering for "app1" is necessary and how users should adapt this for their own applications.
| ```bash | ||
| ZTUNNEL_PODS=$(kubectl get pod -n calico-system \ | ||
| -l app.kubernetes.io/name=ztunnel \ | ||
| -o jsonpath='{.items[*].metadata.name}') | ||
| for P in $ZTUNNEL_PODS; do | ||
| echo "--- Checking logs for pod: $P ---" | ||
| kubectl logs $P -n calico-system 2>/dev/null | \ | ||
| grep -i error | \ | ||
| grep -i app1 | ||
| done |
Copilot
AI
Dec 22, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The troubleshooting command includes a grep filter for "app1" which appears to be specific to a particular application rather than a generic troubleshooting approach. This filter should either be removed to show all errors, or the documentation should explain why filtering for "app1" is necessary and how users should adapt this for their own applications.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Istio Ambient mode isn't available in v3.22 EP2, are we ok adding this in the corresponding versioned docs? or do we want it just in latest
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We're calling it ep3 but using the ep2 docs publishing. structure. All ok.
electricjesus
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
other than my concern about versioned docs, LGTM in terms of Istio Ambient mode
| * We've improved the Service Graph for clusters that have a very high volume of flows. When a high volume of flows is detected for a time range, a new namespaced-focused experience provides quicker access to insights from the graph. | ||
| We've also added more feedback into the UI to keep you informed on the progress of graph computation. | ||
| * The namespace-focused experience will now also highlight namespaces that are estimated to take a long time to load with an orange indicator. | ||
| * We now support installation of $[prodname] on MKE 4k. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@sabags lgtm

Product Version(s):
Issue:
Link to docs preview:
SME review:
DOCS review:
Additional information:
Merge checklist: