apps: upgrade calico to v3.28.1

Author: Zash

helmfile.d/upstream/index.yaml

@@ -65,7 +65,7 @@ charts:
   opensearch-project/opensearch: 2.21.0
   opensearch-project/opensearch-dashboards: 2.19.0
 
-  projectcalico/tigera-operator: v3.26.4
+  projectcalico/tigera-operator: v3.28.1
 
   prometheus-community/kube-prometheus-stack: 56.6.2
   prometheus-community/prometheus-blackbox-exporter: 8.13.0

helmfile.d/upstream/projectcalico/tigera-operator/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: v3.26.4
+appVersion: v3.28.1
 description: Installs the Tigera operator for Calico
 home: https://projectcalico.docs.tigera.io/about/about-calico
 icon: https://projectcalico.docs.tigera.io/images/felix_icon.png
@@ -8,4 +8,4 @@ sources:
 - https://github.com/projectcalico/calico/tree/master/calico/_includes/charts/tigera-operator
 - https://github.com/tigera/operator
 - https://github.com/projectcalico/calico
-version: v3.26.4
+version: v3.28.1

helmfile.d/upstream/projectcalico/tigera-operator/README.md

@@ -87,9 +87,11 @@ ownership of the helm resources to the new chart location.
 The default values.yaml should be suitable for most basic deployments.
 
 ```
-# Image pull secrets to provision for pulling images from private registries.
-# This field is a map of desired Secret name to .dockerconfigjson formatted data to use for the secret.
-# Populates the `imagePullSecrets` property for all Pods controlled by the `Installation` resource.
+# imagePullSecrets is a special helm field which, when specified, creates a secret
+# containing the pull secret which is used to pull all images deployed by this helm chart and the resulting operator.
+# this field is a map where the key is the desired secret name and the value is the contents of the imagePullSecret.
+#
+# Example: --set-file imagePullSecrets.gcr=./pull-secret.json
 imagePullSecrets: {}
 
 # Configures general installation parameters for Calico. Schema is based
@@ -99,6 +101,13 @@ installation:
   enabled: true
   kubernetesProvider: ""
 
+  # imagePullSecrets are configured on all images deployed by the tigera-operator.
+  # secrets specified here must exist in the tigera-operator namespace; they won't be created by the operator or helm.
+  # imagePullSecrets are a slice of LocalObjectReferences, which is the same format they appear as on deployments.
+  #
+  # Example: --set installation.imagePullSecrets[0].name=my-existing-secret
+  imagePullSecrets: []
+
 # Configures general installation parameters for Calico. Schema is based
 # on the operator.tigera.io/Installation API documented
 # here: https://projectcalico.docs.tigera.io/reference/installation/api#operator.tigera.io/v1.APIServerSpec
@@ -146,4 +155,12 @@ tigeraOperator:
   registry: quay.io
 calicoctl:
   image: docker.io/calico/ctl
+
+# Configuration for the Calico CSI plugin - setting to None will disable the plugin, default: /var/lib/kubelet
+kubeletVolumePluginPath: None   
+
+# Optionally configure the host and port used to access the Kubernetes API server.
+kubernetesServiceEndpoint:
+  host: ""
+  port: "6443"
 ```

helmfile.d/upstream/projectcalico/tigera-operator/crds/calico/crd.projectcalico.org_bgpfilters.yaml

@@ -45,12 +45,14 @@ spec:
                       type: string
                     cidr:
                       type: string
+                    interface:
+                      type: string
                     matchOperator:
                       type: string
+                    source:
+                      type: string
                   required:
                   - action
-                  - cidr
-                  - matchOperator
                   type: object
                 type: array
               exportV6:
@@ -64,12 +66,14 @@ spec:
                       type: string
                     cidr:
                       type: string
+                    interface:
+                      type: string
                     matchOperator:
                       type: string
+                    source:
+                      type: string
                   required:
                   - action
-                  - cidr
-                  - matchOperator
                   type: object
                 type: array
               importV4:
@@ -83,12 +87,14 @@ spec:
                       type: string
                     cidr:
                       type: string
+                    interface:
+                      type: string
                     matchOperator:
                       type: string
+                    source:
+                      type: string
                   required:
                   - action
-                  - cidr
-                  - matchOperator
                   type: object
                 type: array
               importV6:
@@ -102,12 +108,14 @@ spec:
                       type: string
                     cidr:
                       type: string
+                    interface:
+                      type: string
                     matchOperator:
                       type: string
+                    source:
+                      type: string
                   required:
                   - action
-                  - cidr
-                  - matchOperator
                   type: object
                 type: array
             type: object

helmfile.d/upstream/projectcalico/tigera-operator/crds/calico/crd.projectcalico.org_bgppeers.yaml

@@ -63,7 +63,7 @@ spec:
               numAllowedLocalASNumbers:
                 description: Maximum number of local AS numbers that are allowed in
                   the AS path for received routes. This removes BGP loop prevention
-                  and should only be used if absolutely necesssary.
+                  and should only be used if absolutely necessary.
                 format: int32
                 type: integer
               password: