Directory Cloud InfrastructureContainers & KubernetesRKE Government

RKE Government

About RKE Government

RKE2 is Rancher's Kubernetes distribution, also known as RKE Government. It is a conformant Kubernetes distribution focused on security and compliance within the U.S. Federal Government sector. It provides defaults and configuration options to help clusters pass the CIS Kubernetes Benchmark. It enables FIPS 140-2 compliance. It regularly scans components for CVEs using trivy in its build pipeline. The distribution runs standalone or integrated into Rancher.

Used for

Passing the CIS Kubernetes Benchmark with minimal operator intervention
Enabling FIPS 140-2 compliance
Scanning components for CVEs
Provisioning new clusters automatically through Rancher

Who it is for

Targets the U.S. Federal Government sector.
Designed for sectors with heightened security requirements.

From RKE Government's own website, read 2026-10-24. How we build listings.

How to evaluate Containers & Kubernetes

This is how the CIOPages Research Team evaluates this category. It is not an assessment of RKE Government. It comes from our Kubernetes Platforms buyer guide.

25%

Control Plane & Day-2 Lifecycle

Managed vs. self-managed control plane and its SLA; how Kubernetes version upgrades roll (in-place, surge, blue-green) and how disruptive they are to running pods; long-term-support version options; CVE patch cadence and how quickly fixes reach the fleet; automated node remediation and certificate rotation

20%

Fleet & Multi-Cluster Management

Single console and API to govern many clusters across clouds, on-prem, and edge; declarative cluster lifecycle and config (Cluster API or equivalent); fleet-wide policy and drift detection; zero-touch provisioning for edge; whether it manages clusters it did not create (imported/attached) or only its own

20%

Security & Compliance

Default-deny posture and admission control (Pod Security, OPA/Kyverno); image scanning and signing in the supply chain; RBAC plus OIDC/enterprise-identity integration; network policy and microsegmentation; CIS-benchmark conformance, audit logging, and FedRAMP/FIPS coverage where regulated

15%

Networking, Storage & Service Mesh

CNI options and how locked-in the default is; ingress and gateway controllers with TLS, rate-limiting, and WAF; CSI drivers for block/file/object and stateful-workload maturity; service mesh integration (Istio, Linkerd, Cilium); cross-cluster connectivity and load balancing

10%

Developer Experience & Self-Service

Namespace and cluster self-service vs. ticket-based provisioning; GitOps support (Argo CD, Flux) as a first-class workflow; developer portal and golden-path integration (Backstage or built-in console); IDE plugins and local-dev parity; how opinionated the platform is about how teams ship

10%

Cost, Portability & Commercial Model

Licensing unit (per-core, per-node, per-cluster, consumption) and how it scales with you; control-plane and extended-support fees; realistic exit cost and how provider-shaped the abstractions are; GPU/AI scheduling support; ecosystem breadth (operators, Helm, marketplace) and how much you must self-integrate

Other Containers & Kubernetes Vendors

View all

AKS Engine for Azure Stack

Accordion

Alauda Container Platform (ACP)

Alibaba Cloud Container Service for Kubernetes

Amazon Elastic Container Service (ECS)

Amazon Elastic Container Service for Kubernetes (EKS)

CIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .