Adds limitation for sidecar L7 features

tigera · Oct 23, 2024 · 4ed016d · 4ed016d
1 parent 8dceee5
commit 4ed016d
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/calico-enterprise/network-policy/application-layer-policies/alp.mdx b/calico-enterprise/network-policy/application-layer-policies/alp.mdx
@@ -17,6 +17,7 @@ Application layer policies let you configure access controls based on L7 attribu
 * Supported protocols are limited to TCP-based protocols (for example, HTTP, HTTPS, or gRPC).
 * Application layer policies apply to the entire cluster.
   They can not be namespaced.
+* Application layer policy is supported only on Kubernetes 1.29 and later.
 
 :::important
 

diff --git a/calico-enterprise/threat/web-application-firewall.mdx b/calico-enterprise/threat/web-application-firewall.mdx
@@ -46,6 +46,7 @@ WAF cannot be used with:
 * Host-networked client pods
 * TLS traffic
 * [LoadBalancer services](https://Kubernetes.io/docs/concepts/services-networking/service/#loadbalancer)
+* WAF is supported only on Kubernetes 1.29 and later.
 
 :::note
 

diff --git a/calico-enterprise/visibility/elastic/l7/configure.mdx b/calico-enterprise/visibility/elastic/l7/configure.mdx
@@ -34,6 +34,7 @@ L7 logs are visible in the Manager UI, service graph, in the HTTP tab.
 
 * L7 log collection is not compatible with a service mesh such as Istio.
 * L7 log collection is not supported for host-networked client pods.
+* L7 log collection is supported only on Kubernetes 1.29 and later.
 
 :::important