> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/kubernetes-security/supported-kubernetes-distributions.md).

# Supported Kubernetes distributions

The following are the supported Kubernetes platform versions for the Kubernetes connector (Posture Management). The table shows the latest version that is supported. We support n-3 versions of each supported Kubernetes environment.

| Kubernetes environment | Notes                                                                                                                                                                                                                                                                                                           |
| ---------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Managed clusters       | <ul><li>Amazon Elastic Kubernetes Service (EKS)</li><li>Microsoft Azure Kubernetes Service (AKS)</li><li><p>Google Kubernetes Engine (GKE)</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p><strong>Note</strong></p><p>Does not include Autopilot.</p></div></li></ul> |
| Managed OpenShift      | Managed Openshift clusters, including ROSA (Red Hat OpenShift on AWS), are supported.                                                                                                                                                                                                                           |
| Self-Managed           | <p>We support every CNCF-certified Kubernetes solution. We've tested our solution on:</p><ul><li>Self-managed vanilla/on-premise Kubernetes clusters.</li><li>Self-managed OpenShift Kubernetes clusters.</li><li>Rancher Distributions (RKE and RKE2).</li></ul>                                               |

The following are the Kubernetes platforms that are supported with Cortex XDR agents (Real-time protection).

This table shows the Kubernetes platform versions that have been compatibility tested. The table shows the latest version that has been tested. All versions that are not EOL, up to the latest version are supported.

| Linux Kubernetes Platform                                 | Version                                                                            |   |
| --------------------------------------------------------- | ---------------------------------------------------------------------------------- | - |
| Unmanaged Kubernetes (k8s)                                | 1.30                                                                               |   |
| Amazon Elastic Kubernetes Service (EKS)                   | 1.33                                                                               |   |
|                                                           | <p>BottleRocket OS x86\_64</p><p>User mode agent only</p>                          |   |
| <p>BottleRocket OS aarch64</p><p>User mode agent only</p> |                                                                                    |   |
| Microsoft Azure Kubernetes Service (AKS)                  | 1.33                                                                               |   |
|                                                           | CBL-mariner 2 x86\_64                                                              |   |
| Google Kubernetes Engine (GKE)                            | 1.33                                                                               |   |
|                                                           | <p>Google Container-Optimized OS (COS)^(\*) x86\_64</p><p>User mode agent only</p> |   |
| Google Kubernetes Engine (GKE) Autopilot                  |                                                                                    |   |
| Oracle Kubernetes Engine (OKE)                            | 1.33                                                                               |   |
| Red Hat Openshift Container Platform (OCP)                | 4.16                                                                               |   |
|                                                           | <p>RHCOS^(\*) x86\_64</p><p>User mode agent only</p>                               |   |
| SUSE Rancher Kubernetes Engine 2 (RKE2)                   | 1.28                                                                               |   |
| Talos                                                     | 1.8.3                                                                              |   |

{% hint style="info" %}

### Note

In Google Container-Optimized OS release 100 and earlier, where the FANOTIFY EXEC flag is not supported, the Kernel configuration may be partial for the user mode agent to properly function. In such cases, the agent will fallback to asynchronous mode.

In RHCOS version 4.12 and earlier, the Kernel configuration may be partial for the user mode agent to properly function. In such cases, the agent will fallback to asynchronous mode.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/kubernetes-security/supported-kubernetes-distributions.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.