---
title: "Exposed APIs, Kubernetes Configuration, and Feature Gates"
description: "We list here some details on the APIs we expose, the software versions we use, and the resources we reserve on each node."
url: https://docs.us.ovhcloud.com/en/public-cloud/managed-kubernetes/exposed-apis-feature-gates
lang: en
---
> For AI agents: the complete documentation index is available at https://docs.us.ovhcloud.com/en/llms.txt, the full documentation bundle is available at https://docs.us.ovhcloud.com/en/llms-full.txt.

# Exposed APIs, Kubernetes Configuration, and Feature Gates

We list here some details on the APIs we expose, the software versions we use, and the resources we reserve on each node.

 

## OVH APIs

We have added a [Kubernetes section](https://api.us.ovhcloud.com/console/#/cloud/project/%7BserviceName%7D/kube) to the [OVHcloud API](https://api.us.ovhcloud.com/).\
Using it you will be able to add and remove nodes, update and reset your clusters, or get `kubectl` configuration.

**Note:**

If you have never used the OVH API, see the [First Steps with the OVHcloud API](https://docs.us.ovhcloud.com/en/manage-and-operate/api/first-steps.md) guide.

 

## Kubernetes Configuration

### API

Admission plugins (defaults are not listed here):

- `AlwaysPullImages`: Force every new pod to pull the required images every time. In a multi-tenant cluster users can be assured that their private images can only be used by those who have the credentials to pull them.
- `NodeRestriction`: Ensure that the kubelet is restricted to the Node and Pod objects that it could modify as defined. Such kubelets will only be allowed to modify their own NodeAPI object and PodAPI objects that are bound to their node.

Authorization modes:

- [Node](https://kubernetes.io/docs/reference/access-authn-authz/node/): Authorize API requests made by kubelets.
- [RBAC](https://kubernetes.io/docs/reference/access-authn-authz/rbac/): Role-based access control is a method of regulating access to computer or network resources based on the roles of individual users within an organization.

Feature gates:

- `TTLAfterFinished`: Allow a TTL controller to clean up resources after they finish execution.

### Kubelet

- `protect-kernel-defaults`: Protect tuned kernel parameters from overriding kubelet default kernel parameter values.

 

## Go further

Browse all the [Managed Kubernetes Service (MKS) guides](https://docs.us.ovhcloud.com/en/public-cloud/managed-kubernetes/landing-page-managed-kubernetes.md).

Browse the rest of the [OVHcloud US documentation](https://docs.us.ovhcloud.com/en/index.md) for guides on our other products and services.

Learn more about [Managed Kubernetes](https://us.ovhcloud.com/public-cloud/kubernetes/) on the OVHcloud US website.