Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+

[justsomebody42]

PodSecurityPolicy is deprecated and will be removed in v1.25+

Expected Behavior

Compatibility with v1.25+

Current Behavior

Deprecation warning...

Possible Solution

See: https://kubernetes.io/docs/reference/using-api/deprecation-guide/#psp-v125

Steps to Reproduce (for bugs)

:~/.kube$ kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
podsecuritypolicy.policy/psp.flannel.unprivileged configured
clusterrole.rbac.authorization.k8s.io/flannel unchanged
clusterrolebinding.rbac.authorization.k8s.io/flannel unchanged
serviceaccount/flannel unchanged
configmap/kube-flannel-cfg unchanged
daemonset.apps/kube-flannel-ds configured

Your Environment

• Flannel version: v0.17.0
• Etcd version: 3.5.1-0
• Kubernetes version (if used): v1.23.5
• Operating System and version: Ubuntu 21.10 / 20.04.4 LTS

[manuelbuil]

Will #1559 fix it?

[thomasferrandiz]

Starting from Kubernetes 1.21, PodSecurityPolicy has been deprecated and will disappear in 1.25.
It should be replaced by the Pod Security admission controller which is in beta starting in 1.23: https://kubernetes.io/blog/2021/12/09/pod-security-admission-beta/

So I think the way to solve this would be to add a second manifest that uses Pod Security instead of PodSecurityPolicy.

#1559 will not solve the issue since the PodSecurityPolicy is not graduating from beta to stable but will be removed completely.