v1.28.13

17 May 2023

Included Calico versions

Calico version: v3.24.6
Calico Enterprise version: v3.15.3

Bug fixes

• Update pin to calico/bird image to fix node tests. calico #7564 (@coutinhop)
• Fix generation of operator-crds.yaml manifest. calico #7218 (@caseydavenport)
• Fix incorrect cleanup in the service policy index after having both ingress and egress rules that reference the same service, resulting in missed IP set updates after one rule was deactivated. calico #7152 (@fasaxc)
• eBPF: CLTB resolves service when IPv4 is masked as IPv4. Commonly happens with gRPC. calico #7091 (@tomastigera)
• Disable VXLAN checksum offload by default for all kernels. calico #7007 (@pasanw)
• Fix panic in calico-node when invalid spoofed IP range provided on a pod. calico #7082 (@caseydavenport)
• Prevents node kube-controller's internal pod cache from getting out-of-sync, thus leaking memory. calico #7540 (@dilyevsky)

Other changes

• Remove usage of deprecated '--logtostderr' command line flag. calico #7616 (@coutinhop)
• ocp.tgz now hosted on GitHub. calico #7213 (@caseydavenport)
• By default, skip 'nodelocaldns' interface in IP auto-detection. calico #7108 (@caseydavenport)