Please provide Calico 3.15 or newer to support Wireguard encryption via Calico

[Paul Goins]

A customer I'm working with is looking to have their in-cluster K8s traffic encrypted, and the WireGuard integration added to Calico 3.15 has been brought up as a way to easily enable this.

While I understand charm-calico would allow for us to use upstream-provided images (e.g. https://hub.docker.com/r/calico/node, https://hub.docker.com/r/calico/kube-controllers), it seems it would be preferable for us to have this via a CDK image hosted via rocks.canonical.com.

Best Regards,
Paul Goins

[Paul Goins (vultaire)]

I recognize this project might be somewhat of a mismatch for the bug, but I wasn't sure which exact project should receive that request. That being said, it may be desirable to update the charm defaults if a new image is made available.

Please link this bug to the appropriate project if this is not the right place. Thank you.

[George Kraft (cynerva)]

I suspect this will be more than just a trivial image bump. I recall trying to update Calico a few months back as part of the VXLAN work, but hit some problems where pods were unable to communicate with eachother on the newer Calico. So I think some investigation and charm fixes will be needed along with the new images.

[George Kraft (cynerva)]

This won't be making it into 1.21.

[Adam Dyess (addyess)]

Calico has been past 3.15 for ages and ages (at least 2 years)