Starting from Kubernetes API version 1.25, PodSecurityPolicy will no longer be served.

This article applies Deprecated API Migration Guide to the hivemq-operator Helm chart.

The relevant point from the Deprecated API Migration Guide is that PodSecurityPolicy in the policy/v1beta1 API version will no longer be served in v1.25 onwards, and the PodSecurityPolicy admission controller will be removed. Kubernetes recommends migrating to Pod Security Admission or a 3rd party admission webhook.

This article also helps you to resolve the error “error: resource mapping not found for name: "hivemq-operator" namespace: "hivemq" from "manifests\operator\hivemq-psp.yaml": no matches for kind "PodSecurityPolicy" in version "policy/v1beta1"

The workaround is to disable the PodSecurityPolicy. How to do it is explained in the instructions below.

 Instructions

1. Get the values from the Helm chart:

   helm show values hivemq/hivemq-operator > my-values.yaml

2. Disable the PodSecurityPolicy:

   global: rbac: pspEnabled: false

3. Deploy the chart using values.yaml:

   helm upgrade my-hivemq \ --install hivemq/hivemq-operator \ --values my-values.yaml \ --namespace my-namespace

   Or, deploy the chart without using values.yaml and disable pspEnabled with --set option:

   helm upgrade my-hivemq \ --install hivemq/hivemq-operator \ --set global.rbac.pspEnabled=false \ --namespace my-namespace

 Related articles