From a6249807464265947f51bf820307326fd31553d2 Mon Sep 17 00:00:00 2001 From: Chris Tauchen Date: Tue, 18 Aug 2026 17:02:18 +0100 Subject: [PATCH 1/4] DOCS-3009: Populate the deprecated and removed features sections Add a Deprecated and removed features section to the Calico Open Source 3.30 and 3.31 release notes, and complete the section in 3.32. Each section states what is deprecated, and carries a table covering a rolling window of three releases. The two deprecations are the aggregation API server, deprecated in 3.32, and FIPS mode, deprecated in 3.30. FIPS mode is deprecated in three releases and had never appeared in any release notes. Rename "aggregated API server" to "aggregation API server" in the 3.32 release notes, so the page uses one name. Co-Authored-By: Claude Opus 5 (1M context) --- .../version-3.30/release-notes/index.mdx | 13 +++++++++++++ .../version-3.31/release-notes/index.mdx | 13 +++++++++++++ .../version-3.32/release-notes/index.mdx | 19 +++++++++++++++---- 3 files changed, 41 insertions(+), 4 deletions(-) diff --git a/calico_versioned_docs/version-3.30/release-notes/index.mdx b/calico_versioned_docs/version-3.30/release-notes/index.mdx index 5f2bb9dd5f..9f2b3928fd 100644 --- a/calico_versioned_docs/version-3.30/release-notes/index.mdx +++ b/calico_versioned_docs/version-3.30/release-notes/index.mdx @@ -161,6 +161,19 @@ Technology preview features are for evaluation and feedback only and are **not s TP = technology preview, GA = generally available, – = not available in that release. +## Deprecated and removed features + +This table shows the status of features that were deprecated or removed at any point in the releases covered here. +Deprecated features are still present and supported, but they are scheduled for removal. Migrate away from a deprecated feature before it is removed. + +* FIPS mode is deprecated and scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). + +| Feature | 3.28 | 3.29 | 3.30 | +| --- | --- | --- | --- | +| FIPS mode | GA | GA | Deprecated | + +GA = generally available, Deprecated = scheduled for removal, Removed = no longer present, – = not available in that release. + {/* ## Known issues */} ## Bug fixes diff --git a/calico_versioned_docs/version-3.31/release-notes/index.mdx b/calico_versioned_docs/version-3.31/release-notes/index.mdx index 5ff1a38147..a4caff6c96 100644 --- a/calico_versioned_docs/version-3.31/release-notes/index.mdx +++ b/calico_versioned_docs/version-3.31/release-notes/index.mdx @@ -187,6 +187,19 @@ Technology preview features are for evaluation and feedback only and are **not s TP = technology preview, GA = generally available, – = not available in that release. +## Deprecated and removed features + +This table shows the status of features that were deprecated or removed at any point in the releases covered here. +Deprecated features are still present and supported, but they are scheduled for removal. Migrate away from a deprecated feature before it is removed. + +* FIPS mode is deprecated and scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). + +| Feature | 3.29 | 3.30 | 3.31 | +| --- | --- | --- | --- | +| FIPS mode | GA | Deprecated | Deprecated | + +GA = generally available, Deprecated = scheduled for removal, Removed = no longer present, – = not available in that release. + ## Bug fixes - Fix slow IPAM release performance when releasing IPs from disabled or deleted pools (especially for bulk deletions like those done by IPAM GC). Consider disabled pools as potential IP owners and cache any loaded blocks for fast access. [calico 11094](https://github.com/projectcalico/calico/pull/11094) (@fasaxc) diff --git a/calico_versioned_docs/version-3.32/release-notes/index.mdx b/calico_versioned_docs/version-3.32/release-notes/index.mdx index 94f4f9d019..3845957f2c 100644 --- a/calico_versioned_docs/version-3.32/release-notes/index.mdx +++ b/calico_versioned_docs/version-3.32/release-notes/index.mdx @@ -12,14 +12,14 @@ Learn about the new features, bug fixes, and other updates in this release of $[ ### Native v3 CRDs (tech preview) -$[prodname] now supports installation with native `projectcalico.org/v3` CRDs as an alternative to the aggregated API server. +$[prodname] now supports installation with native `projectcalico.org/v3` CRDs as an alternative to the aggregation API server. The Tigera Operator registers `projectcalico.org/v3` resources directly as native Kubernetes CRDs — no host-network pods, no ordering dependencies between CRDs and the API server, and `kubectl` manages v3 resources without an extra install step. This removes a long-standing source of installation friction on managed Kubernetes platforms like EKS and AKS. -For existing clusters, a new `DatastoreMigration` controller copies resources from the aggregated API server to native CRDs in place; the datastore is briefly locked but workload connectivity is preserved through the migration window. +For existing clusters, a new `DatastoreMigration` controller copies resources from the aggregation API server to native CRDs in place; the datastore is briefly locked but workload connectivity is preserved through the migration window. Native v3 CRDs require the Kubernetes `MutatingAdmissionPolicy` feature gate, which is beta and not enabled by default. -Native v3 CRDs are the successor to the aggregated API server, and will become the default install mode in a future release. +Native v3 CRDs are the successor to the aggregation API server, and will become the default install mode in a future release. For more information, see [Enable native v3 CRDs](../operations/native-v3-crds.mdx) and [Migrate from API server to native CRDs](../operations/crd-migration.mdx). @@ -101,7 +101,18 @@ TP = technology preview, GA = generally available, – = not available in that r ## Deprecated and removed features -* $[prodname] is moving the `projectcalico.org/v3` API from the aggregated API server to native Kubernetes CRDs. Both mechanisms will be supported until native v3 CRDs are compatible with all supported platforms, after which the aggregated API server will be removed. +This table shows the status of features that were deprecated or removed at any point in the releases covered here. +Deprecated features are still present and supported, but they are scheduled for removal. Migrate away from a deprecated feature before it is removed. + +* Support for the aggregation API server is deprecated and scheduled for removal in an upcoming release. $[prodname] is moving the `projectcalico.org/v3` API to native Kubernetes CRDs. Both mechanisms are supported until native v3 CRDs are compatible with all supported platforms. See [Enable native v3 CRDs](../operations/native-v3-crds.mdx). +* FIPS mode is deprecated and scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). + +| Feature | 3.30 | 3.31 | 3.32 | +| --- | --- | --- | --- | +| Aggregation API server | GA | GA | Deprecated | +| FIPS mode | Deprecated | Deprecated | Deprecated | + +GA = generally available, Deprecated = scheduled for removal, Removed = no longer present, – = not available in that release. ## Bug fixes From 5d8109f0a7e91a1deda9e9cc52f2e22c06424507 Mon Sep 17 00:00:00 2001 From: Chris Tauchen Date: Tue, 18 Aug 2026 17:11:00 +0100 Subject: [PATCH 2/4] DOCS-3009: Name the release a feature was deprecated in A table that covers three releases cannot show a status change that happened in its first column. FIPS mode was deprecated in 3.30, so the 3.32 table shows it as deprecated in every column, which reads the same as a feature deprecated years earlier. State the deprecation release in the bullet for the 3.31 and 3.32 release notes. The 3.30 bullet stays in the present tense, because 3.30 is the release where the deprecation happened. Co-Authored-By: Claude Opus 5 (1M context) --- calico_versioned_docs/version-3.31/release-notes/index.mdx | 2 +- calico_versioned_docs/version-3.32/release-notes/index.mdx | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/calico_versioned_docs/version-3.31/release-notes/index.mdx b/calico_versioned_docs/version-3.31/release-notes/index.mdx index a4caff6c96..b49fa6df74 100644 --- a/calico_versioned_docs/version-3.31/release-notes/index.mdx +++ b/calico_versioned_docs/version-3.31/release-notes/index.mdx @@ -192,7 +192,7 @@ TP = technology preview, GA = generally available, – = not available in that r This table shows the status of features that were deprecated or removed at any point in the releases covered here. Deprecated features are still present and supported, but they are scheduled for removal. Migrate away from a deprecated feature before it is removed. -* FIPS mode is deprecated and scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). +* FIPS mode was deprecated in 3.30 and is scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). | Feature | 3.29 | 3.30 | 3.31 | | --- | --- | --- | --- | diff --git a/calico_versioned_docs/version-3.32/release-notes/index.mdx b/calico_versioned_docs/version-3.32/release-notes/index.mdx index 3845957f2c..895d7e1535 100644 --- a/calico_versioned_docs/version-3.32/release-notes/index.mdx +++ b/calico_versioned_docs/version-3.32/release-notes/index.mdx @@ -105,7 +105,7 @@ This table shows the status of features that were deprecated or removed at any p Deprecated features are still present and supported, but they are scheduled for removal. Migrate away from a deprecated feature before it is removed. * Support for the aggregation API server is deprecated and scheduled for removal in an upcoming release. $[prodname] is moving the `projectcalico.org/v3` API to native Kubernetes CRDs. Both mechanisms are supported until native v3 CRDs are compatible with all supported platforms. See [Enable native v3 CRDs](../operations/native-v3-crds.mdx). -* FIPS mode is deprecated and scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). +* FIPS mode was deprecated in 3.30 and is scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). | Feature | 3.30 | 3.31 | 3.32 | | --- | --- | --- | --- | From 5a118cf3318e9362662277e0a91dea60dbfd63b4 Mon Sep 17 00:00:00 2001 From: Chris Tauchen Date: Wed, 19 Aug 2026 12:49:06 +0100 Subject: [PATCH 3/4] DOCS-3009: Name the deprecation as API server mode The Calico API server is not being removed. In CRD mode the APIServer resource still deploys a webhooks pod, and the architecture reference has called the component the Calico API server in every release since 3.28. What is deprecated is API server mode, where that component serves the `projectcalico.org/v3` API through the Kubernetes aggregation layer. Name the mode in the 3.32 bullet and table row, and record it in the data file. Revert the rename of "aggregated API server" in the Native v3 CRDs section, because that prose describes the mechanism and needs no change. Also add the two deprecated features to the data file. They were pushed to the data file branch after it merged, so they are not on main. Co-Authored-By: Claude Opus 5 (1M context) --- .../version-3.32/release-notes/index.mdx | 10 +++++----- data/feature-status.yaml | 14 ++++++++++++++ 2 files changed, 19 insertions(+), 5 deletions(-) diff --git a/calico_versioned_docs/version-3.32/release-notes/index.mdx b/calico_versioned_docs/version-3.32/release-notes/index.mdx index 895d7e1535..8b05c4003b 100644 --- a/calico_versioned_docs/version-3.32/release-notes/index.mdx +++ b/calico_versioned_docs/version-3.32/release-notes/index.mdx @@ -12,14 +12,14 @@ Learn about the new features, bug fixes, and other updates in this release of $[ ### Native v3 CRDs (tech preview) -$[prodname] now supports installation with native `projectcalico.org/v3` CRDs as an alternative to the aggregation API server. +$[prodname] now supports installation with native `projectcalico.org/v3` CRDs as an alternative to the aggregated API server. The Tigera Operator registers `projectcalico.org/v3` resources directly as native Kubernetes CRDs — no host-network pods, no ordering dependencies between CRDs and the API server, and `kubectl` manages v3 resources without an extra install step. This removes a long-standing source of installation friction on managed Kubernetes platforms like EKS and AKS. -For existing clusters, a new `DatastoreMigration` controller copies resources from the aggregation API server to native CRDs in place; the datastore is briefly locked but workload connectivity is preserved through the migration window. +For existing clusters, a new `DatastoreMigration` controller copies resources from the aggregated API server to native CRDs in place; the datastore is briefly locked but workload connectivity is preserved through the migration window. Native v3 CRDs require the Kubernetes `MutatingAdmissionPolicy` feature gate, which is beta and not enabled by default. -Native v3 CRDs are the successor to the aggregation API server, and will become the default install mode in a future release. +Native v3 CRDs are the successor to the aggregated API server, and will become the default install mode in a future release. For more information, see [Enable native v3 CRDs](../operations/native-v3-crds.mdx) and [Migrate from API server to native CRDs](../operations/crd-migration.mdx). @@ -104,12 +104,12 @@ TP = technology preview, GA = generally available, – = not available in that r This table shows the status of features that were deprecated or removed at any point in the releases covered here. Deprecated features are still present and supported, but they are scheduled for removal. Migrate away from a deprecated feature before it is removed. -* Support for the aggregation API server is deprecated and scheduled for removal in an upcoming release. $[prodname] is moving the `projectcalico.org/v3` API to native Kubernetes CRDs. Both mechanisms are supported until native v3 CRDs are compatible with all supported platforms. See [Enable native v3 CRDs](../operations/native-v3-crds.mdx). +* API server mode is deprecated and scheduled for removal in an upcoming release. In API server mode, the Calico API server serves the `projectcalico.org/v3` API through the Kubernetes aggregation layer. Both modes are supported until native v3 CRDs are compatible with all supported platforms. Migrate to CRD mode; see [Enable native v3 CRDs](../operations/native-v3-crds.mdx). * FIPS mode was deprecated in 3.30 and is scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). | Feature | 3.30 | 3.31 | 3.32 | | --- | --- | --- | --- | -| Aggregation API server | GA | GA | Deprecated | +| API server mode | GA | GA | Deprecated | | FIPS mode | Deprecated | Deprecated | Deprecated | GA = generally available, Deprecated = scheduled for removal, Removed = no longer present, – = not available in that release. diff --git a/data/feature-status.yaml b/data/feature-status.yaml index c07ada07d6..ba858d95a3 100644 --- a/data/feature-status.yaml +++ b/data/feature-status.yaml @@ -10,6 +10,13 @@ # Enterprise versions: 3.24-1 is release line 3.24. features: + - id: api-server-mode + name: API server mode + products: + calico: + "3.28": ga + "3.32": deprecated + - id: calico-ingress-gateway name: Calico Ingress Gateway products: @@ -32,6 +39,13 @@ features: calico: "3.30": tech-preview + - id: fips-mode + name: FIPS mode + products: + calico: + "3.28": ga + "3.30": deprecated + - id: gateway-waf name: Gateway WAF products: From 6cbe67085df8c51bf4f4abf07d6d5c83b01738a8 Mon Sep 17 00:00:00 2001 From: Chris Tauchen Date: Wed, 19 Aug 2026 13:06:18 +0100 Subject: [PATCH 4/4] DOCS-3009: Address review comments on the deprecated features sections Move the bullets into a "Deprecated and removed features in this release" subsection after the table, and keep a bullet only in the release where the change happened. FIPS mode was deprecated in 3.30, so its bullet appears in the 3.30 release notes alone. Nothing was deprecated or removed in 3.31, so that section has a table and no subsection. Use the reviewed intro wording, and drop the en dash from the legend, because no cell uses it. Keep "Aggregation API server" as the name in the table and the data file. Co-Authored-By: Claude Opus 5 (1M context) --- .../version-3.30/release-notes/index.mdx | 13 ++++++++----- .../version-3.31/release-notes/index.mdx | 9 ++++----- .../version-3.32/release-notes/index.mdx | 16 +++++++++------- data/feature-status.yaml | 4 ++-- 4 files changed, 23 insertions(+), 19 deletions(-) diff --git a/calico_versioned_docs/version-3.30/release-notes/index.mdx b/calico_versioned_docs/version-3.30/release-notes/index.mdx index 9f2b3928fd..fbeaa956c6 100644 --- a/calico_versioned_docs/version-3.30/release-notes/index.mdx +++ b/calico_versioned_docs/version-3.30/release-notes/index.mdx @@ -163,16 +163,19 @@ TP = technology preview, GA = generally available, – = not available in that r ## Deprecated and removed features -This table shows the status of features that were deprecated or removed at any point in the releases covered here. -Deprecated features are still present and supported, but they are scheduled for removal. Migrate away from a deprecated feature before it is removed. - -* FIPS mode is deprecated and scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). +Review the following table to see what features have recently been deprecated or removed. +Deprecated features are still present and supported, but they are scheduled for removal. +You should consider migrating away from a deprecated feature before it is removed. | Feature | 3.28 | 3.29 | 3.30 | | --- | --- | --- | --- | | FIPS mode | GA | GA | Deprecated | -GA = generally available, Deprecated = scheduled for removal, Removed = no longer present, – = not available in that release. +GA = generally available, Deprecated = scheduled for removal, Removed = no longer present. + +### Deprecated and removed features in this release + +* FIPS mode is deprecated and scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). {/* ## Known issues */} diff --git a/calico_versioned_docs/version-3.31/release-notes/index.mdx b/calico_versioned_docs/version-3.31/release-notes/index.mdx index b49fa6df74..4909fc2a34 100644 --- a/calico_versioned_docs/version-3.31/release-notes/index.mdx +++ b/calico_versioned_docs/version-3.31/release-notes/index.mdx @@ -189,16 +189,15 @@ TP = technology preview, GA = generally available, – = not available in that r ## Deprecated and removed features -This table shows the status of features that were deprecated or removed at any point in the releases covered here. -Deprecated features are still present and supported, but they are scheduled for removal. Migrate away from a deprecated feature before it is removed. - -* FIPS mode was deprecated in 3.30 and is scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). +Review the following table to see what features have recently been deprecated or removed. +Deprecated features are still present and supported, but they are scheduled for removal. +You should consider migrating away from a deprecated feature before it is removed. | Feature | 3.29 | 3.30 | 3.31 | | --- | --- | --- | --- | | FIPS mode | GA | Deprecated | Deprecated | -GA = generally available, Deprecated = scheduled for removal, Removed = no longer present, – = not available in that release. +GA = generally available, Deprecated = scheduled for removal, Removed = no longer present. ## Bug fixes diff --git a/calico_versioned_docs/version-3.32/release-notes/index.mdx b/calico_versioned_docs/version-3.32/release-notes/index.mdx index 8b05c4003b..06abccca07 100644 --- a/calico_versioned_docs/version-3.32/release-notes/index.mdx +++ b/calico_versioned_docs/version-3.32/release-notes/index.mdx @@ -101,18 +101,20 @@ TP = technology preview, GA = generally available, – = not available in that r ## Deprecated and removed features -This table shows the status of features that were deprecated or removed at any point in the releases covered here. -Deprecated features are still present and supported, but they are scheduled for removal. Migrate away from a deprecated feature before it is removed. - -* API server mode is deprecated and scheduled for removal in an upcoming release. In API server mode, the Calico API server serves the `projectcalico.org/v3` API through the Kubernetes aggregation layer. Both modes are supported until native v3 CRDs are compatible with all supported platforms. Migrate to CRD mode; see [Enable native v3 CRDs](../operations/native-v3-crds.mdx). -* FIPS mode was deprecated in 3.30 and is scheduled for removal in an upcoming release. See [FIPS mode](../operations/fips.mdx). +Review the following table to see what features have recently been deprecated or removed. +Deprecated features are still present and supported, but they are scheduled for removal. +You should consider migrating away from a deprecated feature before it is removed. | Feature | 3.30 | 3.31 | 3.32 | | --- | --- | --- | --- | -| API server mode | GA | GA | Deprecated | +| Aggregation API server | GA | GA | Deprecated | | FIPS mode | Deprecated | Deprecated | Deprecated | -GA = generally available, Deprecated = scheduled for removal, Removed = no longer present, – = not available in that release. +GA = generally available, Deprecated = scheduled for removal, Removed = no longer present. + +### Deprecated and removed features in this release + +* Support for the aggregation API server is deprecated and scheduled for removal in an upcoming release. $[prodname] is moving the `projectcalico.org/v3` API to native Kubernetes CRDs. Both mechanisms are supported until native v3 CRDs are compatible with all supported platforms. Migrate to native v3 CRDs; see [Enable native v3 CRDs](../operations/native-v3-crds.mdx). ## Bug fixes diff --git a/data/feature-status.yaml b/data/feature-status.yaml index ba858d95a3..d9c6021de2 100644 --- a/data/feature-status.yaml +++ b/data/feature-status.yaml @@ -10,8 +10,8 @@ # Enterprise versions: 3.24-1 is release line 3.24. features: - - id: api-server-mode - name: API server mode + - id: aggregation-api-server + name: Aggregation API server products: calico: "3.28": ga