Skip to content

DOCS-3159: Add release and upgrade notes for boot protection - #3187

Draft
ctauchen wants to merge 1 commit into
tigera:mainfrom
ctauchen:docs-3159-boot-protection-notes
Draft

ctauchen wants to merge 1 commit into
tigera:mainfrom
ctauchen:docs-3159-boot-protection-notes

Conversation

@ctauchen

@ctauchen ctauchen commented Nov 6, 2026 •

Copy link
Copy Markdown
Collaborator

Adds the release note and the upgrade note for boot-time network protection on non-cluster hosts, and a procedure for removing the host packages.

Jira: https://tigera.atlassian.net/browse/DOCS-3159

Preview

To do

  • SME to confirm that the RPM upgrade restart engages protection during the upgrade, and that Debian and Ubuntu need daemon-reload before the restart.

Flags

  • Nothing was tested on a host.
  • Two other open PRs add release note bullets at the same spot. Whichever merges later rebases.

Copilot AI lite review requested due to automatic review settings November 6, 2026 12:00
@netlify

netlify Bot commented Nov 6, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for calico-docs-preview-next ready!

Name Link
🔨 Latest commit 16a2126
🔍 Latest deploy log https://app.netlify.com/projects/calico-docs-preview-next/deploys/6aedc17d48026efd96de3023
😎 Deploy Preview https://deploy-preview-3187--calico-docs-preview-next.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify

netlify Bot commented Nov 6, 2026 •

Copy link
Copy Markdown

❌ Deploy Preview for tigera failed. Why did it fail? →

Built without sensitive environment variables

Name Link
🔨 Latest commit 16a2126
🔍 Latest deploy log https://app.netlify.com/projects/tigera/deploys/6aedc17dd8aa6088f98b2ec3

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Approval is deferred because distro-specific package and systemd upgrade behavior affecting firewall state remains unverified, with no host testing and SME validation still required.

No open issues 🎉

What changed in this PR

Adds Calico Enterprise release and upgrade documentation for boot-time network protection on non-cluster hosts and VMs, including package-removal guidance.

Changes:

  • Documents boot-time protection behavior and related RHEL 8 package changes.
  • Adds upgrade guidance for service restarts, systemd reloads, custom integrations, and protection checks.
  • Adds procedures for removing Calico Node and Fluent Bit packages, including the resulting loss of host protection.
File Description
calico-enterprise/​release-notes/​index.mdx Adds release, upgrade, breaking-change, and RHEL support notes for non-cluster host boot protection.
calico-enterprise/​getting-started/​bare-metal/​about.mdx Adds instructions for removing Calico packages from non-cluster hosts and VMs.

Review effort: Lite

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants