Kubernetes Conformance 1.24 + 1.25

Guilherme Steinmüller gsteinmuller at vexxhost.com
Wed Feb 15 12:34:13 UTC 2023


Hi Jake,

Yeah, that could be it.

On devstack magnum master, the kube-apiserver pod fails to start with
rancher 1.25 hyperkube image with:

Feb 14 20:24:06 k8s-cluster-dgpwfkugdna5-master-0 conmon[119164]: E0214
20:24:06.615919       1 run.go:74] "command failed" err="admission-control
plugin \"PodSecurityPolicy\" is unknown"

Regards,
Guilherme Steinmuller

On Tue, Feb 14, 2023 at 10:03 AM Jake Yip <jake.yip at ardc.edu.au> wrote:

> Hi Guilherme Steinmuller,
>
> Is the issue with 1.25 the removal of PodSecurityPolicy? And that there
> are pieces of PSP in Magnum code. I've been trying to remove it.
>
> Regards,
> Jake
>
>
> On 14/2/2023 11:35 pm, Guilherme Steinmüller wrote:
> > Hi everyone!
> >
> > Dale, thanks for your comments here. I no longer have my devstack which
> > I tested v1.25. However, you pointed out something I haven't noticed:
> > for v1.25 I tried using the fedora coreos that is shipped with devstack,
> > which is f36.
> >
> > I will try to reproduce it again, but now using a newer fedora coreos.
> > If it fails, I will be happy to share my results here for us to figure
> > out and get certified for 1.25!
> >
> > Keep in tune!
> >
> > Thank you,
> > Guilherme Steinmuller
> >
> > On Tue, Feb 14, 2023 at 9:26 AM Jake Yip <jake.yip at ardc.edu.au
> > <mailto:jake.yip at ardc.edu.au>> wrote:
> >
> >     On 14/2/2023 6:53 am, Kendall Nelson wrote:
> >      > Hello All!
> >      >
> >      > First of all, I want to say a huge thanks to Guilherme
> >     Steinmuller for
> >      > all his help ensuring that OpenStack Magnum remains Kubernetes
> >     Certified
> >      > [1]! We are certified for v1.24!
> >      >
> >     Wow great work Guilherme Steinmuller!
> >
> >     - Jake
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.openstack.org/pipermail/openstack-discuss/attachments/20230215/b4d00a60/attachment.htm>


More information about the openstack-discuss mailing list