Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+ #787

Closed
stan-sz opened this issue Feb 3, 2022 · 5 comments · Fixed by #966
Closed

policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+ #787

stan-sz opened this issue Feb 3, 2022 · 5 comments · Fixed by #966
Labels
enhancement New feature or request

Comments

@stan-sz
Copy link

stan-sz commented Feb 3, 2022 •
edited by aramase

Based on https://kubernetes.io/docs/reference/using-api/deprecation-guide/#psp-v125 PodSecurityPolicy is deprecated. Opening an issue to track replacement for it.
@stan-sz stan-sz added the bug Something isn't working label Feb 3, 2022
@aramase aramase mentioned this issue Feb 3, 2022
Closed
@github-actions
Copy link

This issue is stale because it has been open 14 days with no activity. Please comment or this will be closed in 7 days.

@github-actions github-actions bot added the stale label Feb 18, 2022
@aramase aramase removed the stale label Feb 18, 2022
@github-actions
Copy link

github-actions bot commented Mar 5, 2022

This issue is stale because it has been open 14 days with no activity. Please comment or this will be closed in 7 days.

@github-actions github-actions bot added the stale label Mar 5, 2022
@sozercan sozercan removed the stale label Mar 5, 2022
@github-actions
Copy link

This issue is stale because it has been open 14 days with no activity. Please comment or this will be closed in 7 days.

@github-actions github-actions bot added the stale label Mar 20, 2022
@pierluigilenoci
Copy link
Contributor

pierluigilenoci commented Mar 21, 2022 •
edited

PSP is replaced with kubernetes/enhancements#2579
Ref: https://kubernetes.io/docs/concepts/security/pod-security-standards/

@github-actions github-actions bot removed the stale label Mar 22, 2022
@aramase aramase added enhancement New feature or request and removed bug Something isn't working labels Mar 24, 2022
@aramase aramase mentioned this issue Aug 30, 2022
Merged
5 tasks
@pierluigilenoci
Copy link
Contributor

@aramase this is a workaround to get the software to work on K8s v1.25 as well but this way it doesn't run with the necessary restricted permissions.

All these "permissions" need to be moved into the securityContexts at the pod and container level.

Ref: https://github.com/Azure/secrets-store-csi-driver-provider-azure/blob/master/charts/csi-secrets-store-provider-azure/templates/podsecuritypolicy.yaml#L8-L23

@pierluigilenoci pierluigilenoci mentioned this issue Aug 31, 2022
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

chore: remove psp aramase/secrets-store-csi-driver-provider-azure
4 participants
@sozercan @aramase @pierluigilenoci @stan-sz