f076c3a387
Removal of PSP Support as part of k8s 1.25/1.26 transition, we are adding a note to each page that has pod security policy contexts from the project doc about its existence in K8S v1.24 and removal from K8S v1.25 Story: 2010590 Task: 48324 Change-Id: Ifefeda7ac181267b66398dbf45af9f6ee1239090 Signed-off-by: Rahul Roshan Kachchap <rahulroshan.kachchap@windriver.com>
35 lines
1.0 KiB
ReStructuredText
35 lines
1.0 KiB
ReStructuredText
|
|
.. ecz1590154334366
|
|
.. _disable-pod-security-policy-checking:
|
|
|
|
====================================
|
|
Disable Pod Security Policy Checking
|
|
====================================
|
|
|
|
.. note::
|
|
|
|
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
|
|
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
|
|
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
|
|
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
|
|
|
|
You can delete the previously added PodSecurityPolicy service parameter to
|
|
disable pod security policy checking.
|
|
|
|
.. rubric:: |proc|
|
|
|
|
#. Remove the kubernetes **kube_apiserver admission_plugins** system
|
|
parameter to exclude PodSecurityPolicy.
|
|
|
|
.. code-block:: none
|
|
|
|
~(keystone_admin)]$ system service-parameter-delete <uuid>
|
|
|
|
#. Apply the Kubernetes system parameters.
|
|
|
|
.. code-block:: none
|
|
|
|
~(keystone_admin)]$ system service-parameter-apply kubernetes
|
|
|
|
|