We are very excited to announce Calico v3.10. Thank you to all of the contributors to this release! For detailed release notes please go here. Below are some highlights from the release.
Support top-level namespace and service account network policy selectors
Calico now supports two new top-level selectors to make writing Calico network policy easier. The namespaceSelector allows you to select the namespace(s) to apply a global network policy to. This enables you to write a single network policy applicable to one or more namespaces. The serviceAccountSelector allows you apply a network policy only to the endpoints which have the specified service accounts attached to them. This selector can be useful in writing network policy to target endpoints with specific service accounts.
Advertisement of Kubernetes Service ExternalIPs
In Calico v3.4, we introduced BGP advertisement of service ClusterIPs. In this release, Calico now also supports BGP advertisement of Kubernetes service ExternalIPs. Advertising service external IPs allows for more flexible routing architectures.
Along with this feature, we moved the configuration of ClusterIPs (along with ExternalIPs) into BGPConfiguration and have deprecated the environment variable CALICO_ADVERTISE_CLUSTER_IPS. We recommend replacing the deprecated CALICO_ADVERTISE_CLUSTER_IPS with a corresponding default BGPConfiguration resource.
For more information please see the service advertisement how-to.
calicoctl now supports the patch command which is similar to how kubectl patch works. The calicoctl patch command allows you update Calico resources in-place. This feature improves the user experience of calicoctl by making it easier to modify Calico resources and making calicoctl feel more like kubectl.
For more information please see the reference page for calicoctl patch.