Starting from Kubernetes API version 1.25, PodSecurityPolicy will no longer be served.


This article applies https://kubernetes.io/docs/reference/using-api/deprecation-guide/#v1-25 to the hivemq-operator Helm chart.

The relevant point from the https://kubernetes.io/docs/reference/using-api/deprecation-guide/#v1-25 is that PodSecurityPolicy in the policy/v1beta1 API version will no longer be served in v1.25 onwards, and the PodSecurityPolicy admission controller will be removed. Kubernetes recommends migrating to Pod Security Admission or a 3rd party admission webhook.

This article also helps you to resolve the error “error: resource mapping not found for name: "hivemq-operator" namespace: "hivemq" from "manifests\operator\hivemq-psp.yaml": no matches for kind "PodSecurityPolicy" in version "policy/v1beta1"


The workaround is to disable the PodSecurityPolicy. How to do it is explained in the instructions below.

 Instructions

  1. Get the values from the Helm chart:

    helm show values hivemq/hivemq-operator > my-values.yaml
  2. Disable the PodSecurityPolicy:

    global: rbac: pspEnabled: false
  3. Deploy the chart using values.yaml:

    helm upgrade my-hivemq \ --install hivemq/hivemq-operator \ --values my-values.yaml \ --namespace my-namespace

    Or, deploy the chart without using values.yaml and disable pspEnabled with --set option:

Filter by label

There are no items with the selected labels at this time.