Kubernetes Compatibility

Cilium is compatible with multiple Kubernetes API Groups. Some are deprecated or beta, and may only be available in specific versions of Kubernetes.

All Kubernetes versions listed are e2e tested and guaranteed to be compatible with Cilium. Older Kubernetes versions not listed in this table do not have Cilium support. Newer Kubernetes versions, while not listed, will depend on the backward compatibility offered by Kubernetes.

k8s Version

k8s NetworkPolicy API

CiliumNetworkPolicy

1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24

cilium.io/v2 has a CustomResourceDefinition

Cilium CRD schema validation

Cilium uses a CRD for its Network Policies in Kubernetes. This CRD might have changes in its schema validation, which allows it to verify the correctness of a Cilium Clusterwide Network Policy (CCNP) or a Cilium Network Policy (CNP).

The CRD itself has an annotation, io.cilium.k8s.crd.schema.version, with the schema definition version. By default, Cilium automatically updates the CRD, and its validation, with a newer one.

The following table lists all Cilium versions and their expected schema validation version:

Cilium Version

CNP and CCNP Schema Version

v1.10.0-rc0

1.23.1

v1.10.0-rc1

1.23.2

v1.10.0-rc2

1.23.2

v1.10.0

1.23.2

v1.10.1

1.23.2

v1.10.2

1.23.3

v1.10.3

1.23.3

v1.10.4

1.23.3

v1.10.5

1.23.3

v1.10.6

1.23.4

v1.10.7

1.23.4

v1.10.8

1.23.4

v1.10.9

1.23.4

v1.10

1.23.4

v1.11.0-rc0

1.24.1

v1.11.0-rc1

1.24.2

v1.11.0-rc2

1.24.2

v1.11.0-rc3

1.24.2

v1.11.0

1.24.2

v1.11.1

1.24.3

v1.11.2

1.24.3

v1.11

1.24.3

v1.12.0-rc0

1.25.1

v1.12.0-rc1

1.25.1

v1.12.0-rc2

1.25.2

v1.12.0-rc3

1.25.3

v1.12.0

1.25.4

latest / master

1.25.2