Skip to main content

System requirements

Step 1: Verify cluster

Verify that your cluster meets these requirements.

PlatformsAll of the Calico Open Source Kubernetes deployments, except:

- OpenShift
- IBM Cloud Kubernetes Service (IKS)
- K3s
- Most clusters with Windows nodes. (We support Windows nodes on AKS.)
ArchitectureOnly AMD64
Kubernetes version- Minimum: v1.23
- Maximum: v1.28

If you have a later version than the maximum, contact Support.
CNIs- Calico CNI v3.15 to v3.26
- Amazon VPC CNI
- Azure CNI
Browsers for Manager UICalico Cloud supports the latest version and "latest minus one" versions of the following browsers:

- Chrome
- Firefox
- Safari

Step 2: Verify cluster is not managed by a Kubernetes reconciler

Calico Cloud cannot be installed on clusters that are managed by any kind of Kubernetes reconciler (for example, Addon-manager). To verify, look for an annotation called on either of the following resources. (The resources may not exist).

  • tigera-operator deployment in the tigera-operator namespace (Installation on AKS may still work if the mode is Reconcile, see AKS for an additional check.)
  • calico-node daemonset in the kube-system namespace

If the following command finds addonmanager on either of the resources, then Addon-manager is being used. Find a different cluster to use.

kubectl get <type> -n <namespace> <resource-name> -o yaml | grep ''

Step 3: Prepare your infrastructure to connect to Calico Cloud

Pods running in your Kubernetes cluster must allow outbound traffic to the following endpoints:

  • TCP to <management-cluster>

For each node, Docker must be able to pull images from the following endpoints:


These connections must be allowed by your Kubernetes cluster and also by the rest of your infrastructure. You won't be able to use Calico Cloud if other elements of your infrastructure, such as firewalls or security groups, restrict access to these endpoints.

Step 4: Verify platform-specific requirements

If you using one of the following platforms, review further requirements. Otherwise, you are ready to connect your cluster in Manager UI: go to Managed clusters, and click Connect.