# Kubernetes requirements

### Kubernetes version

groundcover supports any K8s version from **v1.21.**

{% hint style="info" %}
groundcover may work on many other K8s flavors, but we might just didn't get a chance to test it yet. Can't find yours in the list? [let us know over Slack.](https://www.groundcover.com/join-slack)
{% endhint %}

### Kubernetes distributions

<table><thead><tr><th width="209.33333333333331">K8s distribution</th><th>Status</th><th>Comments</th></tr></thead><tbody><tr><td>EKS</td><td><code>supported</code></td><td></td></tr><tr><td>AKS</td><td><code>supported</code></td><td></td></tr><tr><td>GKE</td><td><code>supported</code></td><td></td></tr><tr><td>OKE</td><td><code>supported</code></td><td></td></tr><tr><td>OpenShift</td><td><code>supported</code></td><td></td></tr><tr><td>Rancher</td><td><code>supported</code></td><td></td></tr><tr><td>Self-managed</td><td><code>supported</code></td><td></td></tr><tr><td>minikube</td><td><code>supported</code></td><td></td></tr><tr><td>kind</td><td><code>supported</code></td><td></td></tr><tr><td>Rancher Desktop</td><td><code>supported</code></td><td></td></tr><tr><td>k0s</td><td><code>supported</code></td><td></td></tr><tr><td>k3s</td><td><code>supported</code></td><td></td></tr><tr><td>k3d</td><td><code>supported</code></td><td></td></tr><tr><td>microk8s</td><td><code>supported</code></td><td></td></tr><tr><td>AWS Fargate</td><td><mark style="color:red;"><code>not supported</code></mark></td><td></td></tr><tr><td>Docker-desktop</td><td><mark style="color:red;"><code>not supported</code></mark></td><td></td></tr></tbody></table>

### Kubernetes RBAC permissions

For the installation to complete successfully, permissions to deploy the following objects are required:

* StatefulSet
* Deployment
* DaemonSet (With privileged containers for loading our [eBPF sensor](https://docs.groundcover.com/getting-started/requirements/kernel-requirements-for-ebpf-sensor))
* ConfigMap
* Secret
* PVC

To learn more about groundcover's architecture and components visit our [**Architecture Section**](https://docs.groundcover.com/architecture/overview)

### Outgoing traffic

groundcover's <mark style="color:purple;">`portal`</mark> pod sends HTTP requests to the cloud platform `app.groundcover.com` on port 443.

This unique [architecture](https://docs.groundcover.com/architecture/overview) keeps the the data inside the cluster and fetches it on-demand keeping the data encrypted all the way without the need to open the cluster for incoming traffic via ingresses.