Tigera

Welcome to the June 2026 edition of the Calico newsletter! Here’s what we have in store for you this month…

NEW PRODUCT LAUNCH

Tigera Launches Lynx, a Unified Control Plane for Kubernetes-native AI Agents

It sits in the path of every agent call (agent-to-agent, agent-to-tool, and agent-to-LLM) to authenticate, authorize, mediate, and audit each one. Built on a decade of deep Kubernetes network security experience, Lynx is generally available today.

Learn more about Lynx

Calico Cloud Free Trial

Get hands-on access to the full Calico platform, and explore key networking, security, and observability features with guided tutorials. No infrastructure setup; start exploring immediately using a provided demo cluster, or connect your own.

Start free trial

eBook: VM networking for Kubernetes

A practitioner’s guide to migrating, securing, and operating VM networking on Kubernetes told through one VM’s journey.

Download Now

Securing Autonomous AI Agents in Production

July 6 | 10 a.m.–11 a.m. PST: In this session, we will move past the AI hype to discuss the architectural constraints and security patterns required to run agentic systems in highly regulated, enterprise environments.

Register Now

Building a Secure, Self-Service Kubernetes Platform: Networking, Provisioning, and Access That Just Work

Join us for a webinar where Krumware, Calico, and Tailscale walk through a reference architecture building a self-service Kubernetes platform, showing how three complementary layers come together into a single, governed developer experience.

Register Now

Open Source

Calico 3.32.1 is out

Tigera has officially rolled out Calico Open Source 3.32.1, the first patch and bug-fix release following the major 3.32 release line.

Key Fixes & Improvements

As a standard maintenance and bug-fix release, 3.32.1 targets minor stability regressions and integration edges found in the initial minor release:

KubeVirt Integration Refinements: Calico 3.32 introduced landmark, first-class support for live-migrating KubeVirt VMs without dropping TCP connections by binding persistent IPs directly to the VM name.

Full release notes can be found here. Learn more about Calico VM migration.

Why You Should Care (A Quick v3.32 Refresh)

If you haven't moved to the 3.32 release line yet, patching up to 3.32.1 gives you the most stable entry point to Calico's newest capabilities:

The Death of calico-apiserver: Calico 3.32 is the most compatible version for GitOps tools like ArgoCD and Flux can now natively validate schemas via native OpenAPI.
Sidecarless mTLS: High-performance workload encryption via zero-trust Ztunnel integration, eliminating the resource overhead of traditional sidecars.
Maglev Load Balancing: Bypasses external load balancers using eBPF data plane optimizations to ensure long-lived connections survive backend churn.
Calico Live VM Migration: Calico 3.32 supports KubeVirt VM migration and allows your VM to preserve its IP address after the migration.

On the Horizon: The "Hypercube" Consolidation (v3.33)

Major architectural cleanup for v3.33.

Image Reduction: By consolidating Go-based components that share dependencies, we are reducing our footprint from 13 images down to just 3.
Simplified UX: This change will drastically simplify the experience for users operating in private registries or restricted environments.

Connect with us online:

Recent Releases: Calico Enterprise & Calico Cloud

June 9, 2026 - Calico Cloud 22.4.1

CVE updates

June 17, 2026 - Calico Enterprise 3.22.6

Fixed a fresh-install RBAC issue preventing secret creation in the tigera-manager namespace, alongside key security updates.

Upgrade today to benefit from the latest improvements and keep your environment running smoothly.

IN THE NEWS

Check out this recent Tigera-related coverage.

Tigera Launches Lynx, a Unified Control Plane for Kubernetes-native AI Agents from Tigera
Tigera Launches Lynx, Unified Control Plane for AI Agents from CIO First
Tigera Lynx Provides a Unified Control Plane for Kubernetes-Native AI Agents from Database Trends & Applications
Tigera Unveils Lynx: A Unified Control Plane for Kubernetes-Native AI Agents from AI Tech 365

➔ To see all coverage and to read Tigera’s press releases, visit our Newsroom.

Blog

➔ Explore all blog posts

Guides

Agentic AI Security – Discover what it takes to defend systems that act on their own: risks unique to agentic AI, essential defenses every deployment needs, and three practical frameworks for putting it all together. Read the guide.

VMware Migration – Learn about VMware migration strategies, challenges, and best practices, plus key VMware migration steps and notable VMware migration tools. Read the guide.

VMware NSX Alternatives – Discover why you might consider alternatives to VMware NSX, key features to look for in network virtualization solutions, and notable VMware NSX alternatives. Read the guide.

White papers

Securing AI Workloads in Kubernetes – Learn the security patterns required to protect AI training and inference workloads in Kubernetes. Download the data sheet.

Business Value of a Single Unified Platform – Explore how a unified approach to networking and security reduces risk and simplifies operations. Read the whitepaper.

Egress Security Checklist – A guide to securing outbound traffic and preventing data exfiltration in enterprise environments. Get the Checklist.

➔ Explore all white papers

Help Center

Our Help Center is an important technical resource for users and customers of Calico Cloud and Calico Enterprise. The Help Center contains technical articles to help you install, configure and manage your Calico solution. Access the Help Center here.

Certifications

Certified Calico Operator: Azure Expert

Gain experience using the Calico–Azure integration through hands-on labs. By the end of this course, you will know more about Azure cloud, as well as managed, self-managed, and hybrid cluster deployment using Calico in Azure. Enroll here.

Certified Calico Operator: Level 1 – Understand how Kubernetes networking works, how to configure and manage a Calico network, and how to secure your cluster following today’s best practices. Enroll here.

Certified Calico Operator: AWS Expert – Understand several options for deploying Kubernetes in AWS, examine how the default AWS networking works, and learn how to configure and manage Calico in AWS, and how to secure your AWS Kubernetes cluster. Enroll here.

Certified Calico Operator: eBPF course – By the end of this course, you’ll be able to run and modify simple eBPF programs, understand the deployment options and methods available with Calico’s eBPF data plane, and confidently deploy eBPF across multiple environment types. Enroll here.

➔ Explore all certification courses

PARTNERS

Tigera sponsored and attended The CNCF Meet on June 10th in Budapest, Hungary. 50 members of the CNCF community heard talks from Dillon Barry (Tigera), Gergely Szabo (Origoss) and the local CNCF ambassador, Mark Sagi-Kazar.
Tigera is a main sponsor of Inspire Change Georgia in Tbilisi, Georgia on July 1st. Dillon Barry and Karl Power will be enlightening the K8s community from Georgia, Moldova and Uzbekistan on both Calico and Lynx. Dillon will be leading a conversation with our established Georgian clients Hash Bank.

➔ See all Tigera partners

We hope you found valuable resources and information in this month’s newsletter, and we welcome your feedback. Please let us know how we can make our monthly newsletter a useful source of information that you look forward to each month. Send us your suggestions.

– The Tigera Team

Tigera

Calico Newsletter – June 2026