Product	Version
Container runtime	Docker CRI-O Containerd
Kubernetes version	1.17 through 1.23
Cloud provider managed Kubernetes	AWS EKS (1.17 through 1.23) EKS on AWS Outpost (1.17 through 1.22) CN-Series for EKS on AWS Outpost does not support SR-IOV or Multus. Azure AKS (1.17 through 1.24) GCP GKE (1.17 through 1.24) Includes GKE Dataplane V2. OCI OKE (1.23)
Customer managed Kubernetes	On the public cloud or on-premise data center. Make sure that the Kubernetes version, CNI Types, and Host VM OS versions are as listed in this table. VMware TKG+ version 1.1.2 Infrastructure Platform—vSphere 7.0 Kubernetes Host VM OS—Photon OS
Kubernetes Host VM	Operating System: Ubuntu 16.04 Ubuntu 18.04 RHEL/Centos 7.3 and later CoreOS 21XX, 22XX Container-Optimized OS
	Linux Kernel Version: 4.18 or later (K8s Service Mode only) 5.4 or later required to enable AF_XDP mode. See Editable Parameters in CN-Series Deployment YAML Files for more information.
	Linux Kernel Netfilter: Iptables
CNI Plugins	CNI Spec 0.3 and later: AWS-VPC Azure Calico Flannel Weave For Openshift, OpenshiftSDN The following are supported on the CN-Series firewall as a DaemonSet. Multus Bridge SR-IOV Macvlan
OpenShift	Version 4.2, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, and 4.10 OpenShift 4.7 is qualified on the CN-Series as a DaemonSet only. OpenShift on AWS

Document:CN-Series Deployment Guide

CN-Series Deployment—Supported Environments