Kubernetes API 1.25 migration

This article applies https://kubernetes.io/docs/reference/using-api/deprecation-guide/#v1-25 to the hivemq-operator Helm chart.

The relevant point from the https://kubernetes.io/docs/reference/using-api/deprecation-guide/#v1-25 is that PodSecurityPolicy in the policy/v1beta1 API version will no longer be served in v1.25, and the PodSecurityPolicy admission controller will be removed. Kubernetes recommends migrating to Pod Security Admission or a 3rd party admission webhook.

The workaround is to disable the PodSecurityPolicy. How to do it is explained in the instructions below.

\uD83D\uDCD8 Instructions

1. Get the values from the Helm chart:

   helm show values hivemq/hivemq-operator > my-values.yaml

2. Disable the PodSecurityPolicy:

   global:
     rbac:
       pspEnabled: false

3. Deploy the chart using values.yaml:

   helm upgrade my-hivemq \
     --install hivemq/hivemq-operator \
     --values my-values.yaml \
     --namespace my-namespace

   Or, deploy the chart without using values.yaml and disable pspEnabled with --set option:

   helm upgrade my-hivemq \
     --install hivemq/hivemq-operator \
     --set global.rbac.pspEnabled=false \
     --namespace my-namespace

\uD83D\uDCCB Related articles