Repository navigation
Conversation
Calico Enterprise 3.24 builds the calico-node, calico-fluent-bit and calico-selinux RPMs for RHEL 9 and RHEL 10, and no longer for RHEL 8. - Requirements: list RHEL 9 and RHEL 10, and install calico-selinux 1.2 for el9 or el10. - Non-cluster hosts: list RHEL 9 and RHEL 10, and drop the RHEL 8 iptables row from the data plane table. - Upgrade with the operator or Helm: upgrade calico-selinux to 1.2.
✅ Deploy Preview for calico-docs-preview-next ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview succeeded!Built without sensitive environment variables
To edit notification comments on pull requests, go to your Netlify project configuration. |
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
Documentation inconsistencies and missing RHEL 8 upgrade guidance must be addressed before approval.
3 open findings
What changed in this PR
Updates next-version Calico Enterprise documentation for RHEL 9/10 support and calico-selinux 1.2.
Changes:
- Replaces RHEL 8 references with RHEL 9 and 10.
- Updates SELinux installation and upgrade commands to version 1.2.
- Removes RHEL 8 from non-cluster host support.
| File | Review |
|---|---|
calico-enterprise/getting-started/upgrading/upgrading-enterprise/kubernetes-upgrade-tsee/operator.mdx |
Add an explicit warning that RHEL 8 clusters cannot be upgraded in place. (nit, 2 votes) |
calico-enterprise/getting-started/upgrading/upgrading-enterprise/kubernetes-upgrade-tsee/helm.mdx |
Add an explicit warning that RHEL 8 clusters cannot be upgraded in place. (nit, 2 votes) |
calico-enterprise/getting-started/bare-metal/about.mdx |
Align the RHEL 9+ table label with the supported RHEL 9 and 10 versions. (nit, 1 vote) |
calico-enterprise/_includes/components/ReqsSys.js |
Resolve the conflicting RHEL 8 example in the eBPF installation documentation. (nit, 4 votes) |
🧠 Review effort: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
- Upgrade with the operator or Helm: calico-selinux 1.2 has no RHEL 8 build, so tell RHEL 8 users to move their nodes to RHEL 9 or 10 first. - eBPF install: use RHEL 9 as the kOps base OS example. RHEL 8.4 does not meet the kernel requirement on the same page.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Product Version(s):
Calico Enterprise v3.24 EP3 (next-version docs only). The versioned
version-3.24-1andversion-3.24-2docs are left as they are.Issue:
Related: projectcalico/calico#14208. calico-selinux is a Calico Enterprise package; Calico Open Source ships no SELinux policy. The issue stays open until the 1.2 RPMs are live.
Link to docs preview:
SME review:
DOCS review:
Additional information:
From v3.24 EP3, the calico-node, calico-fluent-bit and calico-selinux RPMs are built for RHEL 9 and RHEL 10, and no longer for RHEL 8. calico-selinux 1.2 is the first version with an RHEL 10 package. It also lets calico-node start when the
deny_execmemSELinux boolean is on.ReqsSys.js)bare-metal/about.mdx)For reviewers: the v3.23 docs kept RHEL 8 non-cluster hosts supported, while RHEL 8 cluster nodes were deprecated. This change ends RHEL 8 support for non-cluster hosts in v3.24. This is confirmed with PM.
Validation: Vale reports nothing on the changed lines; its remaining alerts are on lines this PR does not touch.
AI assistance: Claude Code wrote the change; reviewed by the author.
Merge checklist: