Install a patch release

Installing the most recent patch version of Calico Enterprise v3.19 ensures that you have the latest bug fixes and improvements. But you can always install, or downgrade to, a previous patch version. Installing an older patch can help if you encounter problems with the latest patch, or if you're required to install only a specific patch version.

Before you begin

This feature is:

• Available in 3.0 and later
• Not available for Helm with operator

How to

1. Download the release archive for your patch version from the following table:

   Patch version	Release archive link
   v3.19.4	https://downloads.tigera.io/ee/archives/release-v3.19.4-v1.34.7.tgz
   v3.19.3	https://downloads.tigera.io/ee/archives/release-v3.19.3-v1.34.6.tgz
   v3.19.2	https://downloads.tigera.io/ee/archives/release-v3.19.2-v1.34.4.tgz
   v3.19.1	https://downloads.tigera.io/ee/archives/release-v3.19.1-v1.34.2.tgz
   v3.19.0-2.0	https://downloads.tigera.io/ee/archives/release-v3.19.0-2.0-v1.34.0.tgz
   v3.19.0-1.0	https://downloads.tigera.io/ee/archives/release-v3.19.0-1.0-v1.33.0.tgz

2. Untar the release-vx.y.z-vx.y.z.tgz to a local directory.

   tar xzvf release-vx.y.z-vx.y.z.tgz

Kubernetes

In the patch release archive, navigate to the manifests folder.

1. Follow the quickstart installation, making the following changes:

   1. Install Tigera operator and custom resource definitions.

      kubectl create -f <your-local-directory-archive>/manifests/tigera-operator.yaml

   2. If you are not using an existing Prometheus operator, install it.

      kubectl create -f <your-local-directory-archive>/manifests/tigera-prometheus-operator.yaml

   3. Install Tigera custom resources.

      kubectl create -f <your-local-directory-archive>/manifests/custom-resources.yaml
      note

      For platforms like AKS or EKS, you must modify the command to be platform specific. EKS example: kubectl create -f <your-local-directory-archive>/manifests/eks/custom-resources.yaml

OpenShift

In the patch release archive, navigate to the ocp-manifests folder which contains three folders install-manifests, enterprise-resources, and upgrade-manifests.

• install-manifests contains all the manifests needed for minimal OCP cluster.
• enterprise-resources contains the Calico Enterprise resources.
• upgrade-manifests folder contains all the manifests needed for upgrading Calico Enterprise.

1. Create the cluster by following the standard installation, with the following caveat:

   1. After the Kubernetes manifests directory is generated, copy the files from install-manifests instead of downloading the manifests.

      note

      Before creating the cluster, be sure to add an image pull secret in install-manifests/02-pull-secret.yaml

2. Install Calico Enterprise resources:

   cd <your-local-directory-archive>/ocp-manifests/enterprise-resources && oc create -f

Features

In the patch release archive, there are additional manifests relating to specific features.

Examples

To apply the patch release for threat defense features.

cd <your-local-directory-archive>/manifests/threatdef && kubectl create -f ejr-vpn.yaml.yaml
cd <your-local-directory-archive>/manifests/threatdef && kubectl create -f tor-exit-feed.yaml