Merge branch 'main' into sc-129903_saml-docs

Author: marcw-replicated

docs/partials/helm/_helmchart-installer-only-annotation.mdx

@@ -0,0 +1,24 @@
+## kots.io/installer-only Annotation
+
+When added to a HelmChart custom resource and set to true, the `kots.io/installer-only` annotation does the following:
+- Excludes the chart from the Helm CLI install and upgrade instructions displayed in the Vendor Portal and Enterprise Portal
+- Excludes the chart from Security Center reports for Helm CLI installations
+
+Charts with `kots.io/installer-only: "true"` are still deployed when using Replicated installers (Embedded Cluster, KOTS, and kURL) and are still included in Security Center reports for Replicated installer deployments.
+
+This annotation is useful for charts that are required for Replicated installer-based deployments but should not be visible or installed when customers use the Helm CLI.
+
+### Example
+
+```yaml
+apiVersion: kots.io/v1beta2
+kind: HelmChart
+metadata:
+  name: kots-only-chart
+  annotations:
+    kots.io/installer-only: "true"
+spec:
+  chart:
+    name: kots-only-chart
+    chartVersion: 1.0.0
+```

docs/reference/custom-resource-helmchart-v2.mdx

@@ -16,6 +16,7 @@ import BuilderAirgapIntro from "../partials/helm/_helm-cr-builder-airgap-intro.m
 import BuilderExample from "../partials/helm/_helm-cr-builder-example.mdx"
 import V2Example from "../partials/helm/_v2-native-helm-cr-example.mdx"
 import KotsHelmCrDescription from "../partials/helm/_kots-helm-cr-description.mdx"
+import HelmChartInstallerOnlyAnnotation from "../partials/helm/_helmchart-installer-only-annotation.mdx"
 
 # HelmChart v2
 
@@ -111,4 +112,6 @@ The `builder` key is required to support the following installation types:
 
 #### Example
 
-<BuilderExample/>
+<BuilderExample/>
+
+<HelmChartInstallerOnlyAnnotation/>

docs/release-notes/rn-vendor-platform.md

@@ -10,6 +10,13 @@ This topic contains release notes for the Replicated Vendor Platform, which incl
 
 <!--RELEASE_NOTES_PLACEHOLDER-->
 
+## v2025.11.25-2
+
+Released on November 25, 2025
+
+### Improvements {#improvements-v2025-11-25-2}
+* Adds the customer ID to the license.
+
 ## v2025.11.07-0
 
 Released on November 7, 2025

docs/vendor/install-with-helm.mdx

@@ -48,6 +48,10 @@ To install a Helm chart:
 
      [View a larger image](/images/helm-install-button.png)
 
+     :::note
+     Helm charts marked with the `kots.io/installer-only: "true"` annotation will not appear in the Helm install instructions. These charts are deployed only when using Replicated installers (Embedded Cluster, KOTS, and kURL). For more information, see [HelmChart v2](/reference/custom-resource-helmchart-v2).
+     :::
+
 1. In the **Helm install instructions** dialog, run the first command to log in to the Replicated registry:
 
      ```bash

docs/vendor/security-center-about.mdx

@@ -17,8 +17,8 @@ The Security Center is powered by Replicated’s [SecureBuild](https://securebui
 * Access to the Security Center Alpha requires a feature flag be turned on for your team. For more information, reach out to your Replicated account representative.
 * Security Center reporting is available only for Embedded Cluster and Helm CLI installations. It is not available for kURL installations or for KOTS installations in an existing cluster.
 * Display and reporting of application images requires the [Replicated SDK version 1.8.0](/release-notes/rn-replicated-sdk#180) or later.
-* Display and reporting of Embedded Cluster images requires the [Replicated SDK version 1.9.0](/release-notes/rn-replicated-sdk#190) or later. 
-* In a Helm CLI install, display of all container images observed in the cluster beyond application images requires setting the Replicated SDK to [Report All Images](/vendor/replicated-sdk-customizing#report-all-images). This setting is automatically enabled for Embedded Cluster installations. 
+* Display and reporting of Embedded Cluster images requires the [Replicated SDK version 1.9.0](/release-notes/rn-replicated-sdk#190) or later.
+* In a Helm CLI install, display of all container images observed in the cluster beyond application images requires setting the Replicated SDK to [Report All Images](/vendor/replicated-sdk-customizing#report-all-images). This setting is automatically enabled for Embedded Cluster installations.
 
 ## Security Center Interfaces
 

docs/vendor/team-management-rbac-resource-names.md

@@ -80,7 +80,7 @@ Grants the holder permission to promote kURL installers to a channel. For more i
 
 :::note
 The `kots/app/[:appId]/installer/promote` policy does not grant the holder permission to view and create installers. Users must be assigned both the `kots/app/[:appId]/installers` and `kots/app/[:appId]/installer/promote` policies to have permissions to view, create, and promote installers.
-:::  
+:::
 
 ### kots/app/[:appId]/license/create
 
@@ -472,6 +472,10 @@ Grants the holder permission to list team members and invitations.
 
 Grants the holder permission to invite additional people to the team.
 
+### team/members/create
+
+Grants the holder permission to create team members.
+
 ### team/members/delete
 
 Grants the holder permission to delete other team members.