Kubernetes Engine
124 Release Notes
Self-managed nodes now support VCN-native pod networking with Kubernetes Engine
When adding a self-managed node to a cluster with OCI Kubernetes Engine, you can now specify that ...
Support for the use of cipher suites with load balancers provisioned by Kubernetes Engine
When OCI Kubernetes Engine provisions an OCI load balancer for a Kubernetes service of type LoadBalancer, you can ...
Support for enabling the proxy protocol feature with load balancers and network load balancers provisioned by Kubernetes Engine
When Kubernetes Engine provisions an OCI load balancer or network load balancer for a Kubernetes service of type LoadBalancer, ...
Support for authorizing pods to access non-OCI resources using OpenID Connect (OIDC) Discovery
OCI Kubernetes Engine now supports OIDC Discovery, enabling you to build applications that interact with other cloud services ...
Support for authentication using an external OpenID Connect (OIDC) identity provider
You can now specify that clusters you create with OCI Kubernetes Engine use an external OpenID Connect (OIDC) ...
Support for additional GPU shapes
OCI Kubernetes Engine now supports a number of additional GPU shapes. Most recently, support has been added for ...
VCN-Native Pod Networking CNI plugin version 2.2.2 now available
The OCI VCN-Native Pod Networking CNI plugin for use with Kubernetes Engine (OKE) includes the following new features and ...
Support for controlling the IPMode of services of type LoadBalancer (Kubernetes version 1.30 or later)
When Kubernetes Engine provisions an OCI load balancer or network load balancer for a Kubernetes service of type LoadBalancer, ...
VCN-Native Pod Networking CNI plugin version 2.2.0 now available
The OCI VCN-Native Pod Networking CNI plugin for use with Kubernetes Engine (OKE) includes the following new features and ...
Support for Kubernetes version 1.28.10
Container Engine for Kubernetes now supports Kubernetes version 1.28.10, in addition to versions 1.30.1 and 1.29.1. With the availability of ...
OCI Kubernetes Engine is the new name for OCI Container Engine for Kubernetes
Oracle Cloud Infrastructure Kubernetes Engine (also known as OCI Kubernetes Engine, and sometimes abbreviated to just OKE) is the ...
Support for Kubernetes version 1.30.1
Container Engine for Kubernetes now supports Kubernetes version 1.30.1, in addition to versions 1.29.1 and 1.28.2. Oracle recommends you upgrade ...
VCN-Native Pod Networking CNI plugin version 2.1.0 now available
The OCI VCN-Native Pod Networking CNI plugin for use with Kubernetes Engine (OKE) includes the following new features and ...
Support for deploying the Kubernetes Metrics Server as a cluster add-on
You can now use the Kubernetes Metrics Server as a cluster add-on. The Kubernetes Metrics Server is a cluster-wide aggregator ...
Support for deploying the OCI native ingress controller as a cluster add-on
You can now use the OCI native ingress controller as a cluster add-on. The OCI native ingress controller implements the ...
Support for Kubernetes version 1.27.10
Container Engine for Kubernetes now supports Kubernetes version 1.27.10, in addition to versions 1.29.1 and 1.28.2. With the availability of ...
Support for Kubernetes version 1.29.1
Container Engine for Kubernetes now supports Kubernetes version 1.29.1, in addition to versions 1.28.2 and 1.27.2. Oracle recommends you upgrade ...
Support for PVCs backed by Ultra-High Performance block volumes
You can now create Kubernetes persistent volume claims (PVCs) backed by Ultra High Performance block volumes.
Having created a ...
Support for the use of workload identity principals with Cluster Autoscaler
You can now use workload identity principals to enable the Kubernetes Cluster Autoscaler to access OCI services and resources when ...
Support for CoreDNS cluster add-on resource request and limit configuration
When running CoreDNS as an add-on to enhanced clusters that you have created using Container Engine for Kubernetes, you can ...
Support for security rule management in NSGs
You can now include an annotation to specify the use of network security groups (NSGs) to manage some or all ...
Support for deploying Istio as a cluster add-on
You can now use Istio as a cluster add-on. Istio is an open-source, platform-independent service mesh that provides traffic management, ...
Path analysis tests to troubleshoot network configuration issues with Kubernetes clusters
You can now run pre-defined network path analysis tests to troubleshoot network configuration issues with clusters you've created using Container ...
Support for Kubernetes version 1.28.2
Container Engine for Kubernetes now supports Kubernetes version 1.28.2, in addition to versions 1.27.2 and 1.26.7. Oracle recommends you upgrade ...
Support for deploying the Kubernetes Cluster Autoscaler as a cluster add-on
You can now use the Kubernetes Cluster Autoscaler as a cluster add-on. Using the Cluster Autoscaler as a cluster add-on ...
Support for flannel when using the OCI native ingress controller
You can now set up the OCI native ingress controller to load balance and route incoming traffic to pods running ...
Virtual node support for pod readiness gates
When Container Engine for Kubernetes provisions an Oracle Cloud Infrastructure load balancer or network load balancer for a Kubernetes service ...
Virtual node support for Kubernetes security contexts
Virtual nodes now support the following Kubernetes security contexts:
- runAsNonRoot
- runAsUser
- runAsGroup
- readOnlyRootFilesystem
- allowPrivilegeEscalation=false ...
Support for Kubernetes volume clones
The CSI volume plugin now supports the use of Kubernetes volume clones (provisioned by block volume clones in the Block ...
Support for Kubernetes version 1.25.12
Container Engine for Kubernetes now supports Kubernetes version 1.25.12, in addition to versions 1.27.2 and 1.26.7. With the availability of ...
Support for Kubernetes version 1.26.7
Container Engine for Kubernetes now supports Kubernetes version 1.26.7, in addition to versions 1.27.2 and 1.25.12. With the availability of ...
Support for virtual nodes running pods on Arm shapes
You can now specify that virtual nodes are to run Kubernetes pods on Arm processors.
For more information, see ...
Support for Container Engine for Kubernetes service logs
You can now use Oracle Cloud Infrastructure Logging to view and search the logs of Kubernetes processes (such as kube-scheduler, ...
Support for Kubernetes version 1.27.2
Container Engine for Kubernetes now supports Kubernetes version 1.27.2, in addition to versions 1.26.2 and 1.25.4. Oracle recommends you upgrade ...
Support for Kubernetes cluster credential rotation
You can now use Container Engine for Kubernetes to change ('rotate') cluster credentials before they expire. Messages informing you of ...
Support for the use of workload identity to access resources in different tenancies and compartments
You can now use workload identity when defining IAM policies to grant a workload fine-grained access to Oracle Cloud Infrastructure ...
Support for SSL between the load balancer and worker nodes in a Kubernetes cluster
When provisioning a load balancer for a Kubernetes service of type LoadBalancer, you can now specify that you want to ...
Support for Self-Managed Nodes
Container Engine for Kubernetes now supports self-managed nodes. A self-managed node is a worker node hosted on a compute instance ...
Support for Kubernetes volume snapshots
The CSI volume plugin now supports the use of Kubernetes volume snapshots (provisioned by block volume backups in the Block ...
Support for OCI Native Ingress Controller
Container Engine for Kubernetes now supports the OCI Native Ingress Controller for ingress resource management. The OCI Native Ingress Controller ...
Support for on-demand node cycling
Container Engine for Kubernetes now supports the on-demand cycling of managed worker nodes. Cycling nodes simplifies both the upgrading of ...
Support for service mesh and performance improvements when using the VCN-Native CNI plugin
Enhancements to the OCI VCN-Native Pod Networking CNI plugin now enable:
- Support for service mesh products, such as ...
Support for Kubernetes version 1.26.2
Container Engine for Kubernetes now supports Kubernetes version 1.26.2, in addition to versions 1.25.4 and 1.24.1. Oracle recommends you upgrade ...
Support for preemptible capacity when configuring node pool placement
When using Container Engine for Kubernetes to define a node pool's placement configuration, you can now specify preemptible capacity as ...
Support for additional GPU shapes
Container Engine for Kubernetes now supports the following additional GPU shapes:
- BM.GPU.A100-v2.8
- BM.GPU.GM4.8
- BM.GPU.A10.4
- BM.GPU.GU1.4 ...
Support for workload identity to improve cluster security
In Oracle Cloud Infrastructure, a workload running on a Kubernetes cluster you have created with Container Engine for Kubernetes is ...
Support for more worker nodes per Kubernetes cluster
You can now use Container Engine for Kubernetes to create clusters with up to 2,000 managed nodes per cluster.
...Support for virtual node pools and virtual nodes
You can now create virtual node pools and virtual nodes with Container Engine for Kubernetes.
Virtual nodes provide a ...
Support for cluster add-on configuration and management
You can now use Container Engine for Kubernetes to configure and manage cluster add-ons. Cluster add-ons are software tools that ...
Enhanced clusters now available
You can now create enhanced clusters with Container Engine for Kubernetes. Enhanced clusters enable you to:
- Simplify node ...
OCI Secrets Store CSI Driver Provider enables Kubernetes clusters to access secrets in Vault
When you create Kubernetes clusters using Container Engine for Kubernetes, you can now choose to store application secrets in an external ...
Support for Kubernetes version 1.25.4
Container Engine for Kubernetes now supports Kubernetes version 1.25.4, in addition to versions 1.24.1 and 1.23.4. Oracle recommends you upgrade ...
Logging Analytics: Monitor and manage Kubernetes with our Marketplace app
The Kubernetes Monitoring and Management Oracle Cloud Marketplace app by Oracle Logging Analytics offers collection of various logs of a ...
Support for dynamically provisioning Kubernetes Persistent Volume Claims (PVCs) on new file systems in File Storage service
You can now provision Kubernetes persistent volume claims (PVCs) by dynamically creating new file systems in the Oracle Cloud Infrastructure ...
Support for explicitly specifying the file system type (ext3, ext4, XFS) for block volumes when provisioning PVCs
When provisioning persistent volume claims (PVCs) on the Block Volume service using the CSI plugin, you can now configure block ...
Support for setting the externalTrafficPolicy parameter and client IP address preservation independently of each other
When provisioning a network load balancer for a Kubernetes service of type LoadBalancer, you can now independently specify:
-
...
Support for Kubernetes version 1.24.1
Container Engine for Kubernetes now supports Kubernetes version 1.24.1, in addition to versions 1.23.4 and 1.22.5. Oracle recommends you upgrade ...
CSI volume plugin is initial default for clusters running Kubernetes version 1.24 (or later)
With the announcement of support for Kubernetes version 1.24, the initial default storage class set for new clusters created by ...
Support for VCN-native pod networking
You can now provide pods with IP addresses from a VCN's CIDR block using the OCI VCN-Native Pod Networking CNI ...
Support for worker node deletion, along with new cordon and drain options
You can now delete specific worker nodes in Kubernetes clusters you've created with Container Engine for Kubernetes.
To ensure ...
Support for backend set worker node selection for load balancers created by Container Engine for Kubernetes
You now have the option to select only a subset of worker nodes in a cluster to include in the ...
Support for OKE images as worker node base images
You can now select OKE images as the base images for worker nodes when creating and updating clusters and node ...
Support for fault domains in node pool placement configuration
When specifying the availability domains in which to place worker nodes, you now have the option to specify one or ...
Support for CSI metrics
You can provision persistent volume claims (PVCs) by attaching volumes from the Block Volume service to clusters created by Container ...
Support for Kubernetes version 1.23.4
Container Engine for Kubernetes now supports Kubernetes version 1.23.4, in addition to versions 1.22.5 and 1.21.5. Oracle recommends you upgrade ...
Support for PVC block volume performance levels
Container Engine for Kubernetes now supports PVC block volume performance levels. You can now define a PVC backed by a ...
Support for Kubernetes version 1.22.5
Container Engine for Kubernetes now supports Kubernetes version 1.22.5, in addition to versions 1.21.5 and 1.20.11. Oracle recommends you upgrade ...
Support for OCI Network Load Balancers
Container Engine for Kubernetes now supports OCI network load balancers (NLBs). You can now define Kubernetes services that automatically provision ...
Support for PVC block volume expansion
Container Engine for Kubernetes now supports block volume expansion, enabling you to increase the size of a Persistent Volume Claim ...
Support for tagging Kubernetes cluster-related resources
Oracle Cloud Infrastructure Tagging allows you to add metadata to resources, which enables you to define keys and values and ...
Support for capacity reservations when configuring node pool placement
When using Container Engine for Kubernetes to define a node pool's placement configuration, you can now specify a capacity reservation ...
Container Engine for Kubernetes support for boot volume and block volume encryption with user-managed keys
The Block Volume service always encrypts boot volume and block volume data at rest, using Oracle-managed encryption keys by default. ...
Support for provisioning Kubernetes Persistent Volume Claims (PVCs) on File Storage service
You can now provision Kubernetes persistent volume claims (PVCs) by mounting file systems in the Oracle Cloud Infrastructure File Storage ...
Support for Custom Cloud-init Initialization Scripts
You can now customize the start-up script used by Container Engine for Kubernetes to configure an instance to be a ...
Support for Oracle Linux 8 worker nodes
You can now select Oracle Linux 8 images to provision worker nodes in node pools running Kubernetes 1.20.x and later. ...
Support for Kubernetes version 1.21.5
Container Engine for Kubernetes now supports Kubernetes version 1.21.5, in addition to versions 1.20.11, and 1.19.15. Oracle recommends you upgrade ...
Support for Kubernetes version 1.19.15
Container Engine for Kubernetes now supports Kubernetes version 1.19.15, in addition to versions 1.20.11 and 1.18.10. With the availability of ...
Support for Kubernetes version 1.20.11
Container Engine for Kubernetes now supports Kubernetes version 1.20.11, in addition to versions 1.19.15 and 1.18.10. With the availability of ...
OCI Service Operator for Kubernetes now available
The OCI Service Operator for Kubernetes is now available, enabling you to perform actions on Oracle Cloud Infrastructure resources using ...
Support for Kubernetes version 1.20.8
Container Engine for Kubernetes now supports Kubernetes version 1.20.8, in addition to versions 1.19.12, and 1.18.10. Oracle recommends you upgrade ...
Node Doctor script now available to troubleshoot worker node issues
You can now troubleshoot issues with worker nodes using the Node Doctor script. The Node Doctor script:
- Prints ...
Support for viewing node pool operation work requests
You can now list work requests and get work request details for node pool operations in a cluster.
For ...
Support for Kubernetes version 1.19.12
Container Engine for Kubernetes now supports Kubernetes version 1.19.12, in addition to versions 1.18.10, and 1.17.13. With the availability of ...
Support for Network Security Group (NSGs)
You can now select network security groups when specifying the security rules that control access to worker nodes in a ...
Support for reserved public IP addresses for load balancers created by Container Engine for Kubernetes
You can now assign a reserved public IP address to the Oracle Cloud Infrastructure public load balancer that Container Engine ...
Support for VCN-native cluster migration
You can now migrate existing clusters to integrate their Kubernetes API endpoints into subnets in your own VCN, enabling you ...
Support for Arm-based shapes
Oracle Container Engine for Kubernetes now supports Arm-based shapes for node pools in clusters running Kubernetes version 1.19.7 or later. ...
Support for GPU shapes
Oracle Container Engine for Kubernetes now supports GPU shapes for node pools in clusters running Kubernetes version 1.19.7 or later. ...
Support for Mapping Kubernetes RBAC to OCI IAM Groups
In addition to IAM users, you can now map IAM groups to Kubernetes RBAC rolebindings and clusterrolebindings.
For more ...
Support for the Kubernetes Cluster Autoscaler project
You can now deploy the Kubernetes Cluster Autoscaler in clusters running Kubernetes version 1.17 (and above) to automatically add and ...
Container Image Scanning, Signing and Verification
You can now enable scanning of container images stored in Oracle Cloud Infrastructure Registry (OCI Registry) for security vulnerabilities published ...
Support for Kubernetes version 1.19.7
Container Engine for Kubernetes now supports Kubernetes version 1.19.7, in addition to versions 1.18.10, 1.17.13, and 1.16.15. Oracle recommends you ...
Private Kubernetes clusters now available
Starting today, Kubernetes clusters you create with Container Engine for Kubernetes using the Console are VCN-native by default. VCN-native clusters ...
Support for load balancers with a flexible shape to distribute traffic between Kubernetes worker nodes
You can now specify a flexible shape for an Oracle Cloud Infrastructure load balancer distributing traffic between the worker nodes ...
New Services available in US Government Cloud
The following services and features are now available in US Government Cloud regions.
- Announcements
- Autoscaling
- Container ...
Support for the Kubernetes ServiceNodeExclusion feature gate
Oracle Container Engine for Kubernetes now automatically enables the ServiceNodeExclusion feature gate on the clusters it creates.
With the ...
Support for Kubernetes versions 1.17.13, 1.16.15, and 1.15.12
Container Engine for Kubernetes continues to support Kubernetes version 1.18.10, and Oracle continues to recommend you upgrade your Kubernetes environment ...
Support for Kubernetes version 1.18.10
Container Engine for Kubernetes now supports Kubernetes version 1.18.10, in addition to versions 1.17.9, 1.16.8, and 1.15.7. Oracle recommends you ...
Improved Support for the VM.Standard.E3 compute shape
Oracle Container Engine for Kubernetes now enables you to select the amount of memory (in addition to the number of ...
New label oci.oraclecloud.com/fault-domain added to worker nodes
Container Engine for Kubernetes now automatically adds the oci.oraclecloud.com/fault-domain label to each worker node (compute instance) in a cluster, according ...
Support for Kubernetes version 1.17.9
Container Engine for Kubernetes now supports Kubernetes version 1.17.9, in addition to versions 1.16.8 and 1.15.7. Oracle recommends you upgrade ...
Support for the VM.Standard.E3 compute shape
Oracle Container Engine for Kubernetes now supports the VM.Standard.E3 compute shape. This E3-based VM standard shape is a flexible shape, ...
Support for changing properties of new worker nodes in a cluster
You can now change the values of a number of properties that are set when a new worker node is ...
Support for the Container Storage Interface (CSI) volume plug-in
The Container Storage Interface (CSI) standard enables storage providers to develop plugins that allow Kubernetes clusters to access block and ...
Patch available to fix Kubernetes security vulnerability (CVE-2020-10749)
A Container Engine for Kubernetes patch is now available to address a recently announced security vulnerability in Kubernetes (CVE-2020-10749 ...
Support for monitoring Kubernetes API server using the Oracle Cloud Infrastructure Audit service
You can now view all operations performed by the Kubernetes API server as log events using the Oracle Cloud Infrastructure ...
Support for additional admission controllers
Oracle Container Engine for Kubernetes now supports the following additional admission controllers:
- PersistentVolumeClaimResize
- Priority
- RuntimeClass ...
Support for Kubernetes version 1.16.8
Container Engine for Kubernetes now supports Kubernetes version 1.16.8, in addition to versions 1.15.7 and 1.14.8. Oracle recommends you upgrade ...
Manage clusters using Cloud Shell
You can now directly manage clusters created by Container Engine for Kubernetes using Cloud Shell.
Cloud Shell offers ...
Support for Kubernetes pod security policies
Oracle Container Engine for Kubernetes now supports pod security policies, enabling you to ensure that pods meet security-related conditions before ...
Monitoring of Kubernetes clusters managed by Container Engine for Kubernetes
The Oracle Cloud Infrastructure Monitoring service now supports Kubernetes clusters and node pools managed by Container Engine for Kubernetes. For ...
Permissions required by the Container Engine for Kubernetes service are created automatically
Previously, you had to define identity policies to grant the Container Engine for Kubernetes service the necessary permissions to create ...
Support for Kubernetes version 1.15.7
Container Engine for Kubernetes now supports Kubernetes version 1.15.7 in addition to 1.13.5 and 1.14.8. Note the following:
-
...
Support for Kubernetes version 1.14.8
Container Engine for Kubernetes now supports Kubernetes version 1.14.8 in addition to 1.12.7 and 1.13.5. Note the following:
-
...
Support for service gateways
Oracle Container Engine for Kubernetes now supports service gateways. Setting up a service gateway enables worker nodes to access other ...
Support for kubeconfig version 2.0.0
Oracle Container Engine for Kubernetes now supports a new version of the Kubernetes configuration file (the 'kubeconfig' file). The kubeconfig ...
Support for regional subnets
You can now create Kubernetes clusters with worker nodes and load balancers in regional subnets. When defining an application's network ...
Support for Kubernetes secrets encryption
Oracle Container Engine for Kubernetes now supports the encryption of Kubernetes secrets at rest. Kubernetes secrets can include sensitive configuration ...
Support for Kubernetes version 1.13.5
Container Engine for Kubernetes now supports Kubernetes version 1.13.5 in addition to 1.11.9 and 1.12.7. Note the following:
-
...
Changes to Policies for Container Engine for Kubernetes
Support for Kubernetes versions 1.11.9 and 1.12.7
To address recently announced security vulnerabilities in Kubernetes (CVE-2019-9512, CVE-2019-9514, CVE-2019-9946 and CVE-2019-1002101), Container Engine for ...
Support for Kubernetes versions 1.11.8 and 1.12.6
To address a recently published security vulnerability in Kubernetes (CVE-2019-1002100), Container Engine for Kubernetes now supports Kubernetes versions ...
Private worker nodes
For additional security, you can now create Kubernetes clusters that have worker nodes in private subnets. These worker nodes are ...
Container Engine for Kubernetes
Deploy containerized applications to the cloud.