Kubernetes v1.25 - Pod Security Policy deprecated

bauger

Looking at the Kubernetes API reference documentation I saw that the Pod Security Policy will be deprecated on the next Kubernetes upgrade version. It is slightly more complex than upgrading the deployment specification code.

Is there a way from these checking tool in the automated CI pipeline to get messages about these important specification changes not yet enforced but that may requires developer time to fix?

Thanks

gouravshah

I see two approaches here,

1. To have kubernetes print the messages which are then logged and then appear on the jenkins logs
2. Use specialised tools to find deprecated resources and report. This could be run as a stage in the pipeline itself.

For 2nd approach you could use the following tools

• https://github.com/FairwindsOps/pluto
• https://github.com/doitintl/kube-no-trouble
• https://github.com/derailed/popeye

Does this answer the question ?

bauger

@gouravshah

Thanks for these links that I will have a look at.