Hi Jake,

Yeah, that could be it. 

On devstack magnum master, the kube-apiserver pod fails to start with rancher 1.25 hyperkube image with:

Feb 14 20:24:06 k8s-cluster-dgpwfkugdna5-master-0 conmon[119164]: E0214 20:24:06.615919       1 run.go:74] "command failed" err="admission-control plugin \"PodSecurityPolicy\" is unknown"

Regards,

Guilherme Steinmuller

On Tue, Feb 14, 2023 at 10:03 AM Jake Yip <jake.yip@ardc.edu.au> wrote:

Hi Guilherme Steinmuller,

Is the issue with 1.25 the removal of PodSecurityPolicy? And that there
are pieces of PSP in Magnum code. I've been trying to remove it.

Regards,
Jake


On 14/2/2023 11:35 pm, Guilherme Steinmüller wrote:
> Hi everyone!
>
> Dale, thanks for your comments here. I no longer have my devstack which
> I tested v1.25. However, you pointed out something I haven't noticed:
> for v1.25 I tried using the fedora coreos that is shipped with devstack,
> which is f36.
>
> I will try to reproduce it again, but now using a newer fedora coreos.
> If it fails, I will be happy to share my results here for us to figure
> out and get certified for 1.25!
>
> Keep in tune!
>
> Thank you,
> Guilherme Steinmuller
>
> On Tue, Feb 14, 2023 at 9:26 AM Jake Yip <jake.yip@ardc.edu.au
> <mailto:jake.yip@ardc.edu.au>> wrote:
>
>     On 14/2/2023 6:53 am, Kendall Nelson wrote:
>      > Hello All!
>      >
>      > First of all, I want to say a huge thanks to Guilherme
>     Steinmuller for
>      > all his help ensuring that OpenStack Magnum remains Kubernetes
>     Certified
>      > [1]! We are certified for v1.24!
>      >
>     Wow great work Guilherme Steinmuller!
>
>     - Jake
>