Updates for v3.23.2

Author: mgleung

calico/_data/versions.yml

@@ -1,3 +1,38 @@
+- title: v3.23.2
+  chart:
+    version: 0
+  tigera-operator:
+   image: tigera/operator
+   registry: quay.io
+   version: v1.27.7
+  components:
+     typha:
+      version: v3.23.2
+     calicoctl:
+      version: v3.23.2
+     calico/node:
+      version: v3.23.2
+     calico/cni:
+      version: v3.23.2
+     calico/apiserver:
+      version: v3.23.2
+     calico/kube-controllers:
+      version: v3.23.2
+     calico/flannel-migration-controller:
+      version: v3.23.2
+     calico/windows:
+      version: v3.23.2
+     networking-calico:
+      version: v3.23.2
+     flannel:
+      version: v0.15.1
+     calico/dikastes:
+      version: v3.23.2
+     flexvol:
+      version: v3.23.2
+     csi-driver:
+      version: v3.23.2
+
 - title: v3.23.1
   chart:
     version: 0

calico/_includes/release-notes/v3.23.2-release-notes.md

@@ -0,0 +1,27 @@
+24 Jun 2022
+
+#### Bug fixes
+
+##### General
+
+ - Fix IP address truncation when using autodetection method "k8s-internal-ip" [calico #6234](https://github.com/projectcalico/calico/pull/6234) (@Josh-Tigera)
+ - Fix that a combination of node deletions and workload IP relocation previously could result in multiple nodes having the same CIDR. [calico #6213](https://github.com/projectcalico/calico/pull/6213) (@robbrockbank)
+ - Fix helm upgrade instructions [calico #6118](https://github.com/projectcalico/calico/pull/6118) (@caseydavenport)
+
+##### Wireguard
+
+ - Handle errors correctly in wireguard tunnel IP setting on the node [calico #6213](https://github.com/projectcalico/calico/pull/6213) (@robbrockbank)
+ - When there is no allocated Wireguard interface IP and host encryption is enabled the host IP is used as the device IP.  This ensures source IP selection will choose the correct host IP when routing over Wireguard [calico #6213](https://github.com/projectcalico/calico/pull/6213) (@robbrockbank)
+ - Don't allocate wireguard device IPs for managed cloud non-calico CNI [calico #6213](https://github.com/projectcalico/calico/pull/6213) (@robbrockbank)
+
+#### Other changes
+
+##### General
+
+ - Update the ipset package from 7.1 to 7.11 for ARM builds [calico #6264](https://github.com/projectcalico/calico/pull/6264) (@ScOut3R)
+ - Calico now uses the TokenRequest API to generate and refresh a token for the CNI plugin.  This ensures that the token remains valid even when the calico-node daemonset is restarted. (@[ScheererJ](https://github.com/ScheererJ)) [calico #6218](https://github.com/projectcalico/calico/pull/6218) (@caseydavenport)
+ - Updating a couple of dependencies for Calico 3.23 (including, spf13/viper, spf13/cobra and etcd related dependencies). Updating the dependencies would also help us with our CVE scan process. [calico #6164](https://github.com/projectcalico/calico/pull/6164) (@Behnam-Shobiri)
+
+##### eBPF dataplane
+
+ - eBPF: Move mount of BPFfs and cgroupv2 to a dedicated init container with elevated privileges; enter the root cgroup namespace to mount cgroupv2 in order to allow the CTLB to be installed system-wide. Reduce the mount privileges of the main calico-node container. [calico #6240](https://github.com/projectcalico/calico/pull/6240) (@mazdakn)