Skip to content

Rename allow-tigera Tier to calico-system#4438

Merged
caseydavenport merged 20 commits intotigera:masterfrom
radixo:rename-allow-tigera
Feb 25, 2026
Merged

Rename allow-tigera Tier to calico-system#4438
caseydavenport merged 20 commits intotigera:masterfrom
radixo:rename-allow-tigera

Conversation

@radixo
Copy link
Copy Markdown
Contributor

@radixo radixo commented Feb 13, 2026

Description

This PR renames allow-tigera Tier to calico-system with the purpose to enable this Tier on Calico OSS.
All the files were changed only applying regex replaces on a few allow-tigera patterns.
Specially for the tigera-operator a cleanup routine was appended to tier's controller and render.

Release Note

The Tier allow-tigera has been renamed to calico-system.

If your Calico installation does not use the Tigera Operator, or if you have created custom Network Policies within this Tier, you must manually update your resources to reference the new Tier name.

Please review and adjust any affected policies to ensure continued correct behavior.

For PR author

  • Tests for change.
  • If changing pkg/apis/, run make gen-files
  • If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

  • Milestone set according to targeted release.
  • Appropriate labels:
    • kind/bug if this is a bugfix.
    • kind/enhancement if this is a a new feature.
    • enterprise if this PR applies to Calico Enterprise only.

The change was made by only replacing the following patterns in all
files:
- s/\ballow-tigera\b/calico-system/g
- s/allowTigera/calicoSystem/g
- s/AllowTigera/CalicoSystem/g
tiers_controller implementation to send to tiers render the objects
needed to clean up the allow-tigera deprecated tier.
Copy link
Copy Markdown
Member

@caseydavenport caseydavenport left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A couple of small comments but overall looking like what I expected!

Comment thread pkg/controller/tiers/tiers_controller.go Outdated
Comment thread pkg/render/tiers/tiers.go Outdated
Comment thread pkg/controller/apiserver/apiserver_controller.go Outdated
Comment thread pkg/controller/clusterconnection/clusterconnection_controller.go Outdated

// DeprecatedAllowTigeraNetworkPolicyObject returns a CNP object with the
// allow-tigera tier on the name as helper for deprecating this old Tier.
func DeprecatedAllowTigeraNetworkPolicyObject(name, namespace string) client.Object {
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Once we move within the component, these functions need not be exposed publicly.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Indeed

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh sorry, it is being consumed from pkg/render and some other subcomponents. It needs to be public. Or I misunderstood what you pointed out.

Comment thread pkg/render/dex.go Outdated
Comment thread pkg/render/manager.go Outdated
Comment thread pkg/render/policyrecommendation.go Outdated
Comment thread pkg/render/typha.go Outdated
Comment thread pkg/render/packet_capture_api.go Outdated
@caseydavenport caseydavenport merged commit 5263316 into tigera:master Feb 25, 2026
6 checks passed
@radixo radixo deleted the rename-allow-tigera branch February 25, 2026 23:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants