From 3183d50d4ce7e2b357710e23f149351aa5ec9dfe Mon Sep 17 00:00:00 2001 From: Kris Coleman Date: Thu, 27 Aug 2026 12:53:40 -0400 Subject: [PATCH] docs(embedded-cluster): document SELinux support and hardened-image limitation for v3 The v3 overview Limitations section didn't mention SELinux, so a v3 reader had no positive statement that installing under SELinux enforcing mode is supported. This carries the existing v2.0.0 overview bullet forward to v3, dropping the "2.8.0 and later" version qualifier and calling out enforcing mode explicitly. --- embedded-cluster/embedded-overview.mdx | 2 ++ 1 file changed, 2 insertions(+) diff --git a/embedded-cluster/embedded-overview.mdx b/embedded-cluster/embedded-overview.mdx index c68c17a894..3e6b78d9a6 100644 --- a/embedded-cluster/embedded-overview.mdx +++ b/embedded-cluster/embedded-overview.mdx @@ -17,6 +17,8 @@ This topic provides an introduction to Replicated Embedded Cluster. * The following Replicated template functions are not supported in Embedded Cluster v3: `HasLocalRegistry`, `LocalRegistryAddress`, `LocalRegistryHost`, `LocalRegistryNamespace`, and `LocalImageName`. Use `ReplicatedImageName` and `ReplicatedImageRegistry` instead. See [Template Functions for Embedded Cluster](template-functions). +* **Installing on STIG- and CIS-hardened OS images is not supported**: Embedded Cluster isn't tested on these images, and issues have arisen when trying to install on them. Embedded Cluster does install in standard SELinux environments, including SELinux in enforcing mode, by setting appropriate SELinux file contexts on the bin directory and restoring SELinux contexts for the data directory after creation. + ## Built-in extensions {#built-in-extensions} The built-in extensions installed by Embedded Cluster include: