Kubernetes Plugins (CNI, CRI, CSI...), Software Versions, and Reserved Resources

In this article, we list some details on the Control Panel, the plugins (CNI, CRI, CSI…), and software versions we use, and the resources we reserve on each Node.

Kubernetes versions

Currently, we support the following Kubernetes releases:

• 1.23 (deprecated)
• 1.24 (deprecated)
• 1.25
• 1.26
• 1.27

If you run a Managed Kubernetes Service using an older version, we strongly encourage you to use the version upgrade feature to receive official support for your cluster.

You will find more details about our End-of-Sale, End-of-Service, and End-of-Life Policies in the dedicated section.

We will closely follow the Kubernetes releases and new versions will be regularly available.

OS, kernel, and Docker versions

The OS, kernel, and Docker daemon versions on your nodes will be regularly updated. The current versions are:

• OS: Ubuntu 22.04 LTS
• Kernel: 5.15-generic
• Docker: 23.0.1

CRI (Container Runtime Interface)

We use containerd as the default CRI:

• 1.23: 1.6.18 (deprecated)
• 1.24: 1.6.18 (deprecated)
• 1.25: 1.6.18
• 1.26: 1.6.20
• 1.27: 1.6.20

CNI (Cluster Network Interface)

The CNI plugin installed is canal which embeds calico for policy and flannel for networking.

The versions installed depend on the Kubernetes version:

• 1.23: calico v3.25.1, flannel v0.17.0 (deprecated)
• 1.24: calico v3.25.1, flannel v0.17.0 (deprecated)
• 1.25: calico v3.25.1, flannel v0.17.0
• 1.26: calico v3.25.1, flannel v0.17.0
• 1.27: calico v3.26.1, flannel v0.17.0

CSI (Container Storage Interface)

The CSI plugin installed is Cinder.

The versions depend on the Kubernetes cluster version:

• 1.23: csi-plugin v1.21.0, csi-attacher v3.4.0, csi-provisioner v3.1.0, csi-snapshotter v5.0.1, snapshot-controller: v4.2.1, csi-resizer v1.4.0 (deprecated)
• 1.24: csi-plugin v1.21.0, csi-attacher v3.5.0, csi-provisioner v3.2.1, csi-snapshotter v6.0.1, snapshot-controller: v6.0.1, csi-resizer v1.5.0 (deprecated)
• 1.25: csi-plugin v1.21.0, csi-attacher v3.5.0, csi-provisioner v3.2.1, csi-snapshotter v6.0.1, snapshot-controller: v6.0.1, csi-resizer v1.5.0
• 1.26: csi-plugin v1.21.0, csi-attacher v3.5.0, csi-provisioner v3.2.1, csi-snapshotter v6.0.1, snapshot-controller: v6.0.1, csi-resizer v1.5.0
• 1.27: csi-plugin v1.21.0, csi-attacher v4.3.0, csi-provisioner v3.5.0, csi-snapshotter v6.2.2, snapshot-controller: v6.2.2, csi-resizer v1.8.0

Other components

The versions are:

• 1.23: coredns v1.10.1, metrics-server v0.6.3 (deprecated)
• 1.24: coredns v1.10.1, metrics-server v0.6.3 (deprecated)
• 1.25: coredns v1.10.1, metrics-server v0.6.3
• 1.26: coredns v1.10.1, metrics-server v0.6.3
• 1.27: coredns v1.11.1, metrics-server v0.6.4

Enabled policies

• Network policies
• Resource quotas
• Limit range

Authorization modes:

• Node: Authorize API requests made by Kubelets.
• RBAC: Role-Based Access Control is a method of regulating access to computer or network resources based on the roles of individual users within an organization.

Feature gates:

• TTLAfterFinished: Allow a TTL controller to clean up resources after they finish execution. (enabled by default for v1.23+, parameter removed in v1.25)

Kubelet

• protect-kernel-defaults: Protect tuned kernel parameters from overriding kubelet default kernel parameter values.

Reserved resources

Each worker node has a certain amount of CPU, RAM, and storage reserved for Kubernetes components.
These reserved quotas may evolve in the future; the page will be updated accordingly.

To guarantee the availability of a customer’s node, the amount of reserved resources depends on the instance flavor.

• CPU reservation is defined through this formula:
  > 15 % of 1CPU+ 0,5% of all CPU cores

• RAM reservation is defined through this formula:
  > 1024MB+ 5% of total memory

• Storage reservation is defined through this formula:
  > log10 (total storage in GB) * 10 + 10% of total storage

This table sums up the reserved resources on b2 flavors: