Skip to content

[docs-scanner] Kubernetes protection version requirement missing from limitations page #24957

@docker-agent

Description

@docker-agent

File: content/manuals/enterprise/security/hardened-desktop/enhanced-container-isolation/limitations.md

Issue

The FAQ page (faq.md) states that Kubernetes is "Protected in Docker Desktop 4.38+ when using the kind provisioner", but the limitations page discusses the KinD provisioner recommendation without mentioning this version requirement:

From limitations.md:

Use the newer Docker Desktop Kubernetes "KinD" provisioner (see Cluster provisioning method). In this mode, and with ECI turned on, each Kubernetes node runs in an ECI-protected container, providing stronger isolation from the Docker Desktop VM.

This section should include the version requirement (4.38+) to help readers understand whether their Docker Desktop version supports this protection.

Why this matters

A reader on the limitations page trying to understand Kubernetes protection with ECI won't know they need Docker Desktop 4.38 or later for the KinD provisioner to provide ECI protection. They might configure KinD on an older version and incorrectly assume they have ECI protection for Kubernetes.

Suggested fix

Add the version requirement to the limitations page recommendation:

Use the newer Docker Desktop Kubernetes "KinD" provisioner (available in Docker Desktop 4.38 and later). In this mode, and with ECI turned on, each Kubernetes node runs in an ECI-protected container, providing stronger isolation from the Docker Desktop VM.


Found by nightly documentation quality scanner

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions