Add workload WAF limitation

[ctauchen]

Product Version(s):

Issue:

Link to docs preview:

SME review:

• An SME has approved this change.

DOCS review:

• A member of the docs team has approved this change.

Additional information:

Merge checklist:

• Deploy preview inspected wherever changes were made
• Build completed successfully
• Test have passed

[netlify]

✅ Deploy Preview for calico-docs-preview-next ready!

Name	Link
🔨 Latest commit	e003268
🔍 Latest deploy log	https://app.netlify.com/projects/calico-docs-preview-next/deploys/694539777b87a80008b4e339
😎 Deploy Preview	https://deploy-preview-2439--calico-docs-preview-next.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify]

✅ Deploy Preview succeeded!

Built without sensitive environment variables

Name	Link
🔨 Latest commit	e003268
🔍 Latest deploy log	https://app.netlify.com/projects/tigera/deploys/694539774b16c40008926b87
😎 Deploy Preview	https://deploy-preview-2439--tigera.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 71 (🔴 down 2 from production) Accessibility: 90 (no change from production) Best Practices: 92 (no change from production) SEO: 92 (no change from production) PWA: - View the detailed breakdown and full score reports

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[Copilot]

Pull request overview

This PR adds documentation for a new limitation of the Workload-based Web Application Firewall (WAF) feature and improves terminology clarity. The changes document that the workload-centric WAF cannot be used with the nftables data plane, and explicitly qualify the limitation section as applying to "Workload-centric WAF" rather than just "WAF" for improved precision.

Key changes:

• Added nftables data plane to the list of WAF limitations
• Changed "WAF cannot be used with:" to "Workload-centric WAF cannot be used with:" for terminological precision

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
calico-enterprise_versioned_docs/version-3.22-2/threat/web-application-firewall.mdx	Backport: Added nftables limitation and clarified terminology for version 3.22-2
calico-enterprise_versioned_docs/version-3.21-2/threat/web-application-firewall.mdx	Backport: Added nftables limitation and clarified terminology for version 3.21-2
calico-enterprise_versioned_docs/version-3.20-2/threat/web-application-firewall.mdx	Backport: Added nftables limitation and clarified terminology for version 3.20-2
calico-enterprise/threat/web-application-firewall.mdx	Added nftables limitation and clarified terminology for current Calico Enterprise development version
calico-cloud_versioned_docs/version-22-2/threat/web-application-firewall.mdx	Backport: Added nftables limitation and clarified terminology for Calico Cloud version 22-2
calico-cloud/threat/web-application-firewall.mdx	Added nftables limitation and clarified terminology for current Calico Cloud development version

The changes are consistent across all modified files, appropriately applied to both versioned (backport) and current development documentation, and align with existing terminology used in product comparison tables throughout the documentation.