26 Aug 2026
Included Calico versions
Calico version: v3.32.1
Calico Enterprise version: v3.23.2
Enhancements
- Reduces the time calico-node takes to be marked ready after starting, which shortens calico-node rolling updates on large clusters. #5207 (@caseydavenport)
Bug fixes
- Fixed a deadlock on upgrade where the Calico API server was moved before a deprecated policy blocking it was removed, leaving the projectcalico.org/v3 API permanently unavailable. #5144 (@xiumozhan)
- Fixed an issue where a non-canonical storage quantity in the LogStorage CR (e.g. 1024Gi) caused the Elasticsearch NodeSet to be renamed on every reconcile, repeatedly recreating the Elasticsearch StatefulSet and its PVCs. #5078 (@pasanw)
Other changes
- Built the operator image with Go 1.26.7, which fixes a net/http bug where ReadHeaderTimeout stayed active after an unencrypted HTTP/2 handoff. #5236 (@dimitri-nicolo)
- Fixed CVE-2026-39821 and CVE-2026-46600 in the operator image by building with Go 1.26.6. #5202 (@dimitri-nicolo)
- On upgrade, the operator-generated CNI config now declares cniVersion 1.0.0 (previously 0.3.1), required for multus compatibility on OpenShift 4.23+. A new Installation field, spec.cni.specVersion, allows pinning a version (including 0.3.1) or leaving it operator-managed (Auto). #5125 (@sridhartigera)
- The ECK operator is updated to v3.4.0. #4966 (@vara2504)
Contributors
caseydavenport, pasanw, and 4 other contributors