Project: KubeArmor (Provisioning / Security & Compliance)
File: support_matrix.md

KubeArmor supports following types of workloads: K8s orchestrated: Workloads deployed as k8s orchestrated containers. In this case, Kubearmor is deployed as a . Note, KubeArmor supports policy enforcement on both k8s-pods () as well as k8s-nodes (). Containerized: Workloads that are containerized but not k8s orchestrated are supported. KubeArmor installed in [systemd mode] can be used to protect such workloads. VM/Bare-Metals: Workloads deployed on Virtual Machines or Bare Metal i.e. workloads directly operating as host/system processes. In this case, Kubearmor is deployed in [systemd mode]. | Provider | K8s engine | OS Image | Arch | [Observability] | Audit Rules | Blocking Rules | [Network-Segmentation] | LSM Enforcer | Remarks | |:-:|::|:--:|::|::|:--:|:--:|:-:|::|:-:| | Onprem | kubeadm, [k0s], [k3s], microk8s | [Distros] | x8664, ARM | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM], AppArmor | | Google | | | Google | | | Microsoft | [AKS] | Ubuntu >= 18.04 | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM], AppArmor | | Oracle | | | IBM | | Ubuntu | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM], AppArmor | | AWS | [EKS] | Amazon Linux 2 (kernel >=5.8) | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM] | | AWS | [EKS] | Amazon Linux 2 (kernel <=5.4) | x8664 | :heavycheckmark: | :heavycheckmark: | :x: | :heavycheck_mark: | SELinux | | AWS | [EKS] | Ubuntu | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | AppArmor | | AWS | [EKS] | [Bottlerocket] | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM] | | AWS | [Graviton] | Ubuntu | ARM | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | AppArmor | | AWS | [Graviton] | Amazon Linux 2 | ARM | :heavycheckmark: | :heavycheckmark: | :x: | :heavycheckmark: | SELinux | | RedHat | [OpenShift] | [RHEL] <=8.4 | x8664 | :heavycheckmark: | :heavycheckmark: | :x: | :heavycheck_mark: | SELinux | | RedHat | [OpenShift] | [RHEL] >=8.5 | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM] | | RedHat | [MicroShift] | [RHEL]

| x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM] | | Rancher | [RKE] | [SUSE] | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM], AppArmor | | Rancher | [K3S] | [Distros] | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM], AppArmor | | Oracle | [Ampere] | [UEK] | ARM | :heavycheckmark: | :heavycheckmark: | :x: | :heavycheckmark: | SELinux | [1084] | | VMware | [Tanzu] | TBD | x86_64 | :construction: | :construction: | :construction: | :construction: | :construction: | [1064] | | Mirantis | [MKE] | Ubuntu>=20.04 | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | AppArmor | [1181] | | Digital Ocean | [DOKS] | Debian GNU/Linux 11 (bullseye) | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM] | [1120] | | Alibaba Cloud | [Alibaba] | Alibaba Cloud Linux 3.2104 LTS | x8664 | :heavycheckmark: | :heavycheckmark: | :heavycheckmark: | :heavycheck_mark: | [BPFLSM] | [1650] | Following distributions are tested for VM/Bare-metal based installations: | Provider | Distro | VM / Bare-metal | Kubernetes | |-|--||| | SUSE | SUSE Enterprise 15 | Full | Full | | Debian | / | Full | Full | | Ubuntu | 18.04 / 16.04 / 20.04 | Full | Full | | RedHat / CentOS | RHEL / CentOS <= 8.4 | Full | Partial | | RedHat / CentOS | RHEL / CentOS >= 8.5 | Full | Full | | Fedora | Fedora 34 / 35 | Full | Full | | Rocky Linux | Rocky Linux >= 8.5 | Full | Full | | AWS | Amazon Linux 2022 | Full | Full | | AWS | Amazon Linux 2023 | Full | Full | | RaspberryPi (ARM) | Debian | Full | Full | | ArchLinux | ArchLinux-6.2.1 | Full | Full | | Alibaba | Alibaba Cloud Linux 3.2104 LTS 64 bit | Full | Full | Note Full: Supports both enforcement and observability Partial: Supports only observability Please approach the Kubearmor community on or a GitHub issue to express interest in adding the support. It would be very much appreciated if you can test kubearmor on a platform not listed above and if you have access to. Once tested you can update this document and raise a PR.