Wanted to revive this thread since our conformance for magnum is past expiration now. 

Looks like the patch has landed but I think there is more work required in the driver to be able to pass the tests. 

I am sure a lot of folks are busy with summit prep, I just wanted to make sure this was still on everyone's radar. 


On Fri, May 5, 2023 at 1:03 PM Guilherme Steinmüller <gsteinmuller@vexxhost.com> wrote:
Hey there! 

I am trying to run conformance against 1.25 and 1.26 now, but it looks like we are still with this ongoing? https://review.opendev.org/c/openstack/magnum/+/874092

Im still facing issues to create the cluster due to "PodSecurityPolicy\" is unknown.

Thank you,
Guilherme Steinmuller

From: Kendall Nelson <kennelson11@gmail.com>
Sent: 21 February 2023 17:38
To: Guilherme Steinmüller <gsteinmuller@vexxhost.com>
Cc: Jake Yip <jake.yip@ardc.edu.au>; OpenStack Discuss <openstack-discuss@lists.openstack.org>; dale@catalystcloud.nz <dale@catalystcloud.nz>
Subject: Re: Kubernetes Conformance 1.24 + 1.25
Circling back to this thread- 

Thanks Jake for getting this rolling! https://review.opendev.org/c/openstack/magnum/+/874092


On Wed, Feb 15, 2023 at 6:34 AM Guilherme Steinmüller <gsteinmuller@vexxhost.com> wrote:
Hi Jake,

Yeah, that could be it. 

On devstack magnum master, the kube-apiserver pod fails to start with rancher 1.25 hyperkube image with:

Feb 14 20:24:06 k8s-cluster-dgpwfkugdna5-master-0 conmon[119164]: E0214 20:24:06.615919       1 run.go:74] "command failed" err="admission-control plugin \"PodSecurityPolicy\" is unknown"

Guilherme Steinmuller

On Tue, Feb 14, 2023 at 10:03 AM Jake Yip <jake.yip@ardc.edu.au> wrote:
Hi Guilherme Steinmuller,

Is the issue with 1.25 the removal of PodSecurityPolicy? And that there
are pieces of PSP in Magnum code. I've been trying to remove it.


On 14/2/2023 11:35 pm, Guilherme Steinmüller wrote:
> Hi everyone!
> Dale, thanks for your comments here. I no longer have my devstack which
> I tested v1.25. However, you pointed out something I haven't noticed:
> for v1.25 I tried using the fedora coreos that is shipped with devstack,
> which is f36.
> I will try to reproduce it again, but now using a newer fedora coreos.
> If it fails, I will be happy to share my results here for us to figure
> out and get certified for 1.25!
> Keep in tune!
> Thank you,
> Guilherme Steinmuller
> On Tue, Feb 14, 2023 at 9:26 AM Jake Yip <jake.yip@ardc.edu.au
> <mailto:jake.yip@ardc.edu.au>> wrote:
>     On 14/2/2023 6:53 am, Kendall Nelson wrote:
>      > Hello All!
>      >
>      > First of all, I want to say a huge thanks to Guilherme
>     Steinmuller for
>      > all his help ensuring that OpenStack Magnum remains Kubernetes
>     Certified
>      > [1]! We are certified for v1.24!
>      >
>     Wow great work Guilherme Steinmuller!
>     - Jake