Updates for v3.22.2

calico/_data/versions.yml

@@ -1,3 +1,32 @@
+- title: v3.22.2
+  tigera-operator:
+   image: tigera/operator
+   registry: quay.io
+   version: v1.25.7
+  components:
+     typha:
+      version: v3.22.2
+     calicoctl:
+      version: v3.22.2
+     calico/node:
+      version: v3.22.2
+     calico/cni:
+      version: v3.22.2
+     calico/apiserver:
+      version: v3.22.2
+     calico/kube-controllers:
+      version: v3.22.2
+     calico/flannel-migration-controller:
+      version: v3.22.2
+     networking-calico:
+      version: v3.22.2
+     flannel:
+      version: v0.13.0
+     calico/dikastes:
+      version: v3.22.2
+     flexvol:
+      version: v3.22.2
+
 - title: v3.22.1
   tigera-operator:
    image: tigera/operator

calico/_includes/release-notes/v3.22.2-release-notes.md

@@ -0,0 +1,11 @@
+14 Apr 2022
+
+#### Bug fixes
+
+ - Fix Get-IsDSRSupported command not found in Calico Windows install script [calico #5908](https://github.com/projectcalico/calico/pull/5908) (@lmm)
+ - Handle bootstrapping of Wireguard to ensure felix is able to connect to typha. This fixes a bug that is present when HostEncryptionEnabled is set to true (which is required for using wireguard with AKS). Previously, when nodes shared their wireguard public keys, depending on the order they keys were shared, it was possible to end up with asymmetric node-to- node routing. Packets will be dropped between impacted nodes. If the typha nodes are impacted then it is possible for other nodes to be effectively locked out from connecting to typha and the routing issue will persist. This will be apparent through persistent readiness checks failing on the node. [calico #5870](https://github.com/projectcalico/calico/pull/5870) (@robbrockbank)
+ - Add FelixConfiguration option for FloatingIPs [calico #5865](https://github.com/projectcalico/calico/pull/5865) (@caseydavenport)
+ - IPAM garbage collector properly releases IP addresses whose handles have been deleted [calico #5827](https://github.com/projectcalico/calico/pull/5827) (@caseydavenport)
+ - Build components with go 1.17.8 to pick up CVE fixes. [calico #5818](https://github.com/projectcalico/calico/pull/5818) (@doublek)
+ - eBPF mode: Fix that policy would see 0.0.0.0:0 as the post-nat destination for SYN packets that had a conntrack hit. [calico #5773](https://github.com/projectcalico/calico/pull/5773) (@fasaxc)
+ - Fix dynamic build of pod2daemon which resulted in cryptic "no such file or directory" errors [calico #5751](https://github.com/projectcalico/calico/pull/5751) (@caseydavenport)