dhellmann
commented
1 year ago The PodSecurityPolicy API has been removed from Kubernetes, and therefore from MicroShift. See https://kubernetes.io/docs/concepts/security/pod-security-policy/ for details.
Perhaps a newer version of MetalLB does not require PSP?
What is not documented correctly:
Deploy a basic application doesn't work as expected, will hit the following errors, $ oc apply -f https://raw.githubusercontent.com/metallb/metallb/v0.11.0/manifests/metallb.yaml ... deployment.apps/controller created resource mapping not found for name: "controller" namespace: "metallb-system" from "https://raw.githubusercontent.com/metallb/metallb/v0.11.0/manifests/metallb.yaml": no matches for kind "PodSecurityPolicy" in version "policy/v1beta1" ensure CRDs are installed first resource mapping not found for name: "speaker" namespace: "metallb-system" from "https://raw.githubusercontent.com/metallb/metallb/v0.11.0/manifests/metallb.yaml": no matches for kind "PodSecurityPolicy" in version "policy/v1beta1"
What you expected or propose to be documented:
We need to find an available solution for this example. For MicroShift, we don't have PodSecurityPolicy resource actually. $ oc api-resources | grep -i PodSecurityPolicy
Environment:
MicroShift version (use
microshift version): $ microshift version MicroShift Version: 4.13.0_0.nightly_2023_02_23_000625_20230228165434_57b147ce Base OCP Version: 4.13.0-0.nightly-2023-02-23-000625Hardware configuration:
OS (e.g:
cat /etc/os-release): $ cat /etc/os-release NAME="Red Hat Enterprise Linux" VERSION="9.1 (Plow)" ID="rhel" ID_LIKE="fedora" VERSION_ID="9.1" PLATFORM_ID="platform:el9" PRETTY_NAME="Red Hat Enterprise Linux 9.1 (Plow)" ANSI_COLOR="0;31" LOGO="fedora-logo-icon" CPE_NAME="cpe:/o:redhat:enterprise_linux:9::baseos" HOME_URL="https://www.redhat.com/" DOCUMENTATION_URL="https://access.redhat.com/documentation/red_hat_enterprise_linux/9/" BUG_REPORT_URL="https://bugzilla.redhat.com/"REDHAT_BUGZILLA_PRODUCT="Red Hat Enterprise Linux 9" REDHAT_BUGZILLA_PRODUCT_VERSION=9.1 REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux" REDHAT_SUPPORT_PRODUCT_VERSION="9.1"
uname -a): $ uname -a Linux dhcp-1-235-104.arm.eng.rdu2.redhat.com 5.14.0-162.18.1.el9_1.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Feb 9 04:28:41 EST 2023 x86_64 x86_64 x86_64 GNU/Linux