[CE 3.22 EP3] Modify release notes for 3.22 EP3#2452
Conversation
✅ Deploy Preview for calico-docs-preview-next ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview succeeded!Built without sensitive environment variables
To edit notification comments on pull requests, go to your Netlify project configuration. |
There was a problem hiding this comment.
Pull request overview
This PR adds a release note entry for Calico Enterprise v3.22 EP3 to document a critical known issue with Felix panicking when WAF/L7 features are enabled in eBPF mode.
Key Changes
- Added a new known issue to the release notes documenting Felix panic behavior with WAF/L7 features in eBPF mode
| This occurs because some Calico images are missing the required nftables binaries and incorrectly rely on legacy iptables modules that have been removed from newer operating systems. | ||
| As a workaround, ensure your host platform has legacy iptables kernel modules installed and loaded until a full fix is delivered in an upcoming patch release. | ||
| * Kibana attempts external API calls that are blocked by network policies related to Elastic Fleet. Errors will show in the logs. There is no further impact. | ||
| * Felix panics when WAF/L7 features are enabled in eBPF mode. |
There was a problem hiding this comment.
The known issue lacks important context for users encountering this problem. Consider adding details about: 1) what triggers this panic (specific configuration or conditions), 2) the impact on system functionality, and 3) any available workarounds or recommended actions until a fix is available. This would align with the level of detail provided in the preceding known issue about nftables binaries.
| * Felix panics when WAF/L7 features are enabled in eBPF mode. | |
| * Felix can panic on nodes that run the eBPF data plane when WAF or other L7 features (such as L7 logging) are enabled. | |
| This causes Felix to restart on the affected nodes, which can delay or temporarily interrupt the programming of network policy and dataplane state. | |
| As a workaround until a fix is available, avoid enabling WAF/L7 features on clusters using the eBPF data plane, or disable those features on affected nodes and use non-L7 policies only. |
There was a problem hiding this comment.
+1 @sabags @rene-dekker Can we add more information here?
There was a problem hiding this comment.
@ctauchen : do you think the copilot suggestion is better here ?
There was a problem hiding this comment.
I think it's always good to have those elements in a known issue. Conditions for problem, description of workaround, and indicate whether this is due to be fixed.
|
@sabags I'm merging this now so we have something in there. It would be good to follow up with details when you get them. |
Product Version(s):
Calico Enterprise v3.22 EP3
Issue:
Release note was missing to highlight a key issue
Link to docs preview:
SME review:
DOCS review:
Additional information:
Merge checklist: