https://rancher.com/ logo
#general
Title
# general
c

crooked-cat-21365

03/20/2023, 3:22 PM
I have setup a new cluster using Rancher 2.7.1 and RKE2 v1.24.10+rke2r1. First thing Rancher shows me is a warning about deprecated security policies:
Copy code
Pod Security Policies are deprecated as of Kubernetes v1.21, and have been removed in Kubernetes v1.25. You have one or more PodSecurityPolicy resource(s) in this cluster.
How comes? Couldn't this have been avoided at install time (which is 10 minutes ago)?
h

hundreds-evening-84071

03/20/2023, 3:25 PM
I can add, I see this same issue with creating RKE2 v1.23.16 cluster (Rancher 2.7.1 - stable)
b

bulky-sunset-52084

03/20/2023, 5:01 PM
rancher 2.7.1 includes PSPs built in - which is exactly why we dont support 1.25+ yet. We are working on removing and replacing PSPs for the next release.
p

polite-piano-74233

03/20/2023, 5:25 PM
yea its a 'this is going away in kubernetes version 1.25 so dont use it on any of your newly created apps' type of warning, but i agree is a bit vague as rancher uses tons of psp everywhere
c

crooked-cat-21365

03/21/2023, 10:25 AM
1.25 is supposed to be supported by Rancher 2.7.2, if I got this correctly. https://github.com/rancher/rancher/releases/tag/v2.7.2-rc6 doesn't mention a migration procedure. Do you have further information? What about the apps from the app store installing their own PSPs (eg. Longhorn)?
22 Views