diff --git a/calico-enterprise/network-policy/application-layer-policies/alp.mdx b/calico-enterprise/network-policy/application-layer-policies/alp.mdx
index a423514c5e..582db1d50b 100644
--- a/calico-enterprise/network-policy/application-layer-policies/alp.mdx
+++ b/calico-enterprise/network-policy/application-layer-policies/alp.mdx
@@ -17,6 +17,7 @@ Application layer policies let you configure access controls based on L7 attribu
 * Supported protocols are limited to TCP-based protocols (for example, HTTP, HTTPS, or gRPC).
 * Application layer policies apply to the entire cluster.
   They can not be namespaced.
+* Application layer policy is supported only on Kubernetes 1.29 and later.
 
 :::important
 
diff --git a/calico-enterprise/threat/web-application-firewall.mdx b/calico-enterprise/threat/web-application-firewall.mdx
index 51241e1ed0..1bc868cd1d 100644
--- a/calico-enterprise/threat/web-application-firewall.mdx
+++ b/calico-enterprise/threat/web-application-firewall.mdx
@@ -46,6 +46,7 @@ WAF cannot be used with:
 * Host-networked client pods
 * TLS traffic
 * [LoadBalancer services](https://Kubernetes.io/docs/concepts/services-networking/service/#loadbalancer)
+* WAF is supported only on Kubernetes 1.29 and later.
 
 :::note
 
diff --git a/calico-enterprise/visibility/elastic/l7/configure.mdx b/calico-enterprise/visibility/elastic/l7/configure.mdx
index dde106634a..db02ae8675 100644
--- a/calico-enterprise/visibility/elastic/l7/configure.mdx
+++ b/calico-enterprise/visibility/elastic/l7/configure.mdx
@@ -34,6 +34,7 @@ L7 logs are visible in the Manager UI, service graph, in the HTTP tab.
 
 * L7 log collection is not compatible with a service mesh such as Istio.
 * L7 log collection is not supported for host-networked client pods.
+* L7 log collection is supported only on Kubernetes 1.29 and later.
 
 :::important