Support RHEL 9 and 10 for host packages and calico-selinux 1.2

calico-enterprise/_includes/components/ReqsSys.js

@@ -31,7 +31,7 @@ function NodeRequirementsEnt(props) {
             {(props.orch === orchestrators.Kubernetes || props.orch === orchestrators.HostProtection) && (
               <>
                 <li>Ubuntu 20.04 and 22.04</li>
-                <li>RHEL 8 and RHEL 9</li>
+                <li>RHEL 9 and RHEL 10</li>
                 <li>Debian 10</li>
                 <li>Azure Linux Container Host</li>
               </>
@@ -51,20 +51,20 @@ function NodeRequirementsEnt(props) {
         </li>
         <li>
           <p>
-            If your node is running RHEL 8 or RHEL 9, you must install a specialized policy package before you install {prodname}.
+            If your node is running RHEL 9 or RHEL 10, you must install a specialized policy package before you install {prodname}.
             With this package, {prodname} can use SELinux contexts in a series of rules that allow it to interact with persistent and ephemeral data in nonstandard host system locations.
           </p>
           <ul>
             <li>
-              <p>If your node has RHEL 8 installed, then run the following command:</p>
+              <p>If your node has RHEL 9 installed, then run the following command:</p>
               <CodeBlock language="bash">
-                {`dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.1-1.el8.noarch.rpm`}
+                {`dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.2-1.el9.noarch.rpm`}
               </CodeBlock>
             </li>
             <li>
-              <p>If your node has RHEL 9 installed, then run the following command:</p>
+              <p>If your node has RHEL 10 installed, then run the following command:</p>
               <CodeBlock language="bash">
-                {`dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.1-1.el9.noarch.rpm`}
+                {`dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.2-1.el10.noarch.rpm`}
               </CodeBlock>
             </li>
           </ul>

calico-enterprise/getting-started/bare-metal/about.mdx

@@ -52,7 +52,7 @@ To learn how to restrict traffic to/from hosts and VMs using Calico network poli
     ```
     If you see a line that says `x86-64-v3 (supported, searched)`, your processor supports the required microarchitecture.
   - The following host operating systems are supported:
-    - RHEL 8 and RHEL 9
+    - RHEL 9 and RHEL 10
     - Ubuntu 22.04 and 24.04
     - Debian 12 and Debian 13
   - Your operating system includes the `ipset` and `conntrack` kernel dependencies.
@@ -66,7 +66,6 @@ cluster will use nftables, but can be configured to use iptables.
 
 |   OS    | Cluster Data Plane |  Non-Cluster Host Data Plane  |
 | :-----: | :----------------: | :---------------------------: |
-| RHEL 8  |         Any         |           iptables            |
 | RHEL 9+ |         Any         | nftables (default) / iptables |
 | Ubuntu  |         Any         | nftables (default) / iptables |
 | Debian  |         Any         | nftables (default) / iptables |

calico-enterprise/getting-started/upgrading/upgrading-enterprise/kubernetes-upgrade-tsee/helm.mdx

@@ -52,20 +52,22 @@ If you receive an error indicating the resource or resource type does not exist,
 
 ### RHEL nodes with SELinux
 
-If you installed the `calico-selinux` policy package on RHEL nodes, upgrade it to version 1.1 on each of those nodes before you upgrade $[prodname]. With version 1.0, SELinux stops the log collector from mapping its files under `/var/log/calico`, and the `calico-fluent-bit` pods crash-loop. To check whether a node has the package, run `rpm -q calico-selinux`.
+If you installed the `calico-selinux` policy package on RHEL nodes, upgrade it to version 1.2 on each of those nodes before you upgrade $[prodname]. With versions older than 1.1, SELinux stops the log collector from mapping its files under `/var/log/calico`, and the `calico-fluent-bit` pods crash-loop. To check whether a node has the package, run `rpm -q calico-selinux`.
 
-On RHEL 8 nodes, run:
+On RHEL 9 nodes, run:
 
 ```bash
-dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.1-1.el8.noarch.rpm
+dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.2-1.el9.noarch.rpm
 ```
 
-On RHEL 9 nodes, run:
+On RHEL 10 nodes, run:
 
 ```bash
-dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.1-1.el9.noarch.rpm
+dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.2-1.el10.noarch.rpm
 ```
 
+The `calico-selinux` 1.2 package has no RHEL 8 build. Move RHEL 8 nodes to RHEL 9 or RHEL 10 before you upgrade $[prodname].
+
 ### Upgrade OwnerReferences
 
 If you do not use OwnerReferences on resources in the projectcalico.org/v3 API group, you can skip this section.

calico-enterprise/getting-started/upgrading/upgrading-enterprise/kubernetes-upgrade-tsee/operator.mdx

@@ -59,20 +59,22 @@ If you receive an error indicating the resource or resource type does not exist,
 
 ### RHEL nodes with SELinux
 
-If you installed the `calico-selinux` policy package on RHEL nodes, upgrade it to version 1.1 on each of those nodes before you upgrade $[prodname]. With version 1.0, SELinux stops the log collector from mapping its files under `/var/log/calico`, and the `calico-fluent-bit` pods crash-loop. To check whether a node has the package, run `rpm -q calico-selinux`.
+If you installed the `calico-selinux` policy package on RHEL nodes, upgrade it to version 1.2 on each of those nodes before you upgrade $[prodname]. With versions older than 1.1, SELinux stops the log collector from mapping its files under `/var/log/calico`, and the `calico-fluent-bit` pods crash-loop. To check whether a node has the package, run `rpm -q calico-selinux`.
 
-On RHEL 8 nodes, run:
+On RHEL 9 nodes, run:
 
 ```bash
-dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.1-1.el8.noarch.rpm
+dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.2-1.el9.noarch.rpm
 ```
 
-On RHEL 9 nodes, run:
+On RHEL 10 nodes, run:
 
 ```bash
-dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.1-1.el9.noarch.rpm
+dnf install https://downloads.tigera.io/ee/archives/calico-selinux-1.2-1.el10.noarch.rpm
 ```
 
+The `calico-selinux` 1.2 package has no RHEL 8 build. Move RHEL 8 nodes to RHEL 9 or RHEL 10 before you upgrade $[prodname].
+
 ### Upgrade OwnerReferences
 
 If you do not use OwnerReferences on resources in the projectcalico.org/v3 API group, you can skip this section.

calico-enterprise/operations/ebpf/install.mdx

@@ -135,7 +135,7 @@ kubeadm init --skip-phases=addon/kube-proxy
 </TabItem>
 <TabItem label="kOps" value="kOps-1">
 
-`kops` supports a number of base OSes; as long as the base OS chosen (such as Ubuntu 22.04 or RHEL 8.4) meets the kernel
+`kops` supports a number of base OSes; as long as the base OS chosen (such as Ubuntu 22.04 or RHEL 9) meets the kernel
 requirements, `kops`-provisioned clusters are supported.
 
 Since `kube-proxy` is not required in eBPF mode, you must disable `kube-proxy` at install time. With `kops` you