Skip to content

fix: automatically roll tigera-operator deployment when managed kubernetes-services-endpoint ConfigMap is changed#11343

Open
Algeran wants to merge 1 commit intoprojectcalico:masterfrom
Algeran:restart-operator-on-kubernetes-service-endpoint-change
Open

fix: automatically roll tigera-operator deployment when managed kubernetes-services-endpoint ConfigMap is changed#11343
Algeran wants to merge 1 commit intoprojectcalico:masterfrom
Algeran:restart-operator-on-kubernetes-service-endpoint-change

Conversation

@Algeran
Copy link

@Algeran Algeran commented Nov 7, 2025

Description

When kubernetes-services-endpoint ConfigMap is managed by helm release (kubernetesServiceEndpoint.host property is specified), any change to the host/port property will not trigger the rollout of tigera-operator deployment. In this case, environment variables in the process of the operator are not updated and it requires manual restart of the deployment.
This change adds the checksum annotation to pod annotations and in case if the ConfigMap is managed by helm release and if it's changed, the checksum will be changed as well and it will trigger an automatic rollout.

Related issues/PRs

Based on answer in QA: https://github.com/orgs/projectcalico/discussions/11332

Todos

  • Tests
  • Documentation
  • Release note

Release Note

Any changes to the kubernetes-services-endpoint ConfigMap managed by Helm Release automatically trigger a tigera-operator Deployment rollout.

Reminder for the reviewer

Make sure that this PR has the correct labels and milestone set.

Every PR needs one docs-* label.

  • docs-pr-required: This change requires a change to the documentation that has not been completed yet.
  • docs-completed: This change has all necessary documentation completed.
  • docs-not-required: This change has no user-facing impact and requires no docs.

Every PR needs one release-note-* label.

  • release-note-required: This PR has user-facing changes. Most PRs should have this label.
  • release-note-not-required: This PR has no user-facing changes.

Other optional labels:

  • cherry-pick-candidate: This PR should be cherry-picked to an earlier release. For bug fixes only.
  • needs-operator-pr: This PR is related to install and requires a corresponding change to the operator.

@Algeran Algeran requested a review from a team as a code owner November 7, 2025 15:11
@marvin-tigera marvin-tigera added this to the Calico v3.32.0 milestone Nov 7, 2025
@marvin-tigera marvin-tigera added release-note-required Change has user-facing impact (no matter how small) docs-pr-required Change is not yet documented labels Nov 7, 2025
@CLAassistant
Copy link

CLAassistant commented Nov 7, 2025

CLA assistant check
All committers have signed the CLA.

@Algeran Algeran changed the title fix: automatically roll tigera-operator deployment when managed kubernetes-services-endpoint cm is changed fix: automatically roll tigera-operator deployment when managed kubernetes-services-endpoint ConfigMap is changed Nov 7, 2025
@caseydavenport
Copy link
Member

/sem-approve

@caseydavenport
Copy link
Member

Thanks!

@github-actions
Copy link
Contributor

github-actions bot commented Jan 6, 2026

This PR is stale because it has been open for 60 days with no activity.

@github-actions github-actions bot added the stale Issues without recent activity label Jan 6, 2026
@caseydavenport
Copy link
Member

Sorry I missed this one, but there's a bug here that is failing the static checks - we use the helm chart to generate the manifests in this repo (you need to run make gen-manifests).

but even so, it is currently generating invalid YAML due to an empty map annotations: appearing.

@github-actions github-actions bot removed the stale Issues without recent activity label Jan 7, 2026
@caseydavenport
Copy link
Member

caseydavenport commented Jan 27, 2026

i.e.,

--- a/manifests/tigera-operator.yaml
+++ b/manifests/tigera-operator.yaml
@@ -572,6 +572,7 @@ spec:
       labels:
         name: tigera-operator
         k8s-app: tigera-operator
+      annotations:
     spec:
       nodeSelector:
         kubernetes.io/os: linux

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docs-pr-required Change is not yet documented release-note-required Change has user-facing impact (no matter how small)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants