Replicated Monthly Release Highlights — September 2025

Paige Calvert
 | 
Sep 3, 2025

What’s New for Compatibility Matrix

(Beta) Set network policy to open or airgap for VMs and VM-based clusters. Vendors can now use the Replicated CLI to update the network policy for a VM or VM-based cluster created with Compatibility Matrix. By default, all VMs and clusters are created with an open network policy. You can change the network policy to airgap to create an air-gapped environment with no outbound internet access. The airgap network policy is particularly useful for testing air gap installations for your application. Docs.

What’s New for Embedded Cluster

Support for Kubernetes 1.33 in Embedded Cluster (Embedded Cluster 2.10.0). With the release of 2.10.0, Embedded Cluster now supports Kubernetes 1.31, 1.32, and 1.33. Embedded Cluster 2.10.0 also removed support for 1.30.

Support for standard SELinux environments (Embedded Cluster 2.8.0). Embedded Cluster 2.8.0 and later can install on the default SELinux policies that come with distributions like RHEL. Additionally, a new SELinux host preflight check is designed to catch custom policies or rules in the SELinux configuration and highlight any changes needed to proceed to a successful installation.

What’s New for KOTS


KOTS 1.126.0 updates release notes, the version label, and requirements when checking for updates. When a user checks for upstream updates, the Admin Console now automatically updates release notes, version labels, and release requirements based on the latest information from the Vendor Portal. This means that vendors can mark a previously-required release as no longer required, and the version history page in the Admin Console is updated accordingly. Demo.

Demoted releases are removed from the version history page in the Admin Console. Demoted releases are now removed from the Admin Console version history page the next time that an upstream update check occurs. Docs.

What’s New for Vendor Portal

Scope image registries to one or more specific applications. Vendors can now scope their external image registries to a specific application (or set of applications). When the registry is scoped to specific applications, only customers with a valid license for the given application(s) have pull-through access to the images in the registry. Docs.

Add a nickname for external image registries. Vendors can now set a name for each image registry instead of having the full hostname in the path. This helps to prevent image names from getting too long in the UI. Docs.

UX improvements on Image Registries page. In addition to the above enhancements, we also improved the layout of the image registries page to make it easier to see relevant information at a glance.

(Beta) Support for SCIM Provisioning. SAML-enabled teams can now leverage automated provisioning and deprovisioning with the SCIM protocol. Reach out to your Replicated account representative for more information. Docs.

Support for service provider-initiated login. For teams with SAML enabled, the Vendor Portal supports IdP-initiated login from the vendor’s identity provider dashboard. By default, this only works for existing and invited users. However, vendors can request JIT provisioning for their team so that users are redirected to the IDP for authentication. Reach out to your Replicated account representative for more information. Docs.

What’s New for the Replicated SDK 

SDK reports image tags and digests (SDK 1.8.0). The SDK version 1.8.0 now returns tags and digests of the running images for each instance to the Vendor Portal. This is primarily useful for CVE scanning and understanding the exact build a customer is running.

What’s New for the Enterprise Portal

Enterprise Portal displays install instructions for Helm charts based on their [.inline]weight[.inline]. With this change, Replicated ensures consistent sorting for chart order based on the chart’s [.inline]weight[.inline] property across all API endpoints and installer UI interfaces. Additionally, the relevant docs were updated to make it clearer that setting chart [.inline]weight[.inline] impacts display and installation ordering in both the Enterprise Portal and the KOTS Admin Console. Docs.

(Beta) Enterprise Portal self-serve signups. When self-serve signups are enabled, vendors can offer an option for end customers to create an account and get a trial license through their Enterprise Portal. As part of this feature, vendors can create custom emails for self signups, include a link to Terms and Conditions, and customize the default trial license. Self-serve signups are off by default. If you are interested in enabling self service signups through your Enterprise Portal, reach out to your Replicated account representative. 

What’s New for Troubleshoot

The RunPod collector in Troubleshoot now allows image pull retries. Previously a RunPod collector encountering imagePullBackOff would fail regardless of any preset timeouts. Now, an optional allowImagePullRetries boolean field allows ImagePullBackOff conditions to respect the configured timeout instead of failing immediately. This version of troubleshoot (v0.121.2) is available in Embedded Cluster 2.7.4 and KOTS 1.125.1. Docs.

What’s New for Documentation

Updated quick start tutorial. The quick start tutorial is now updated to use the SlackerNews application, which is the same application used in Replicated’s labs. As part of this update, the quick start also now shows how to create a VM with Compatibility Matrix for the purpose of testing installation of the application with Embedded Cluster. Docs.


Clarify the use of the [.inline]--private-ca-configmap[.inline] flag and the PrivateCaCert template function. The docs for the PrivateCaCert template function are updated to better explain how KOTS mounts the certs in the ConfigMap returned by PrivateCaCert, the source of the contents of the ConfigMap, and some recommendations on how to append the certs to the default trust store if you want to mount the ConfigMap in your app container. Docs.

Reference docs for the Embedded Cluster commands. We now have reference documentation for all the commands provided with the Embedded Cluster binary in a single location. Docs.

Clarify how demoted releases are handled with each installation method. Docs. The docs are updated to better explain when a customer will or will not see a demoted release as available for update in the Admin Console.


Various improvements to the Compatibility Matrix docs. The Compatibility Matrix docs are improved to include information about working with VMs (Beta). For example, we added steps on how to create VMs from the Vendor Portal UI and updated the Compatibility Matrix overview and pricing pages to include the relevant information about VMs. Docs.

Update HelmChart configuration instructions on how to rewrite image locations to local registries. These instructions now recommend using [.inline]optionalValues[.inline] rather than ternary operators, which simplifies the process of rewriting required images to the user’s local registry during air gap installs. Docs.

Clarify how status informers work for Helm CLI installations with the SDK. The docs on enabling application status insights are updated to clarify the use cases why a vendor might want to add custom status informers in the SDK’s [.inline]statusInformers[.inline] value, such as if you want status insights for resources created by subcharts. Docs.