Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Checking Kubernetes clusters fails because v1/PodSecurityPolicy is checked, though it does not exist in the K8s API #245

Closed
shurkanTwo opened this issue Feb 15, 2023 · 2 comments · May be fixed by #246
Closed

Checking Kubernetes clusters fails because v1/PodSecurityPolicy is checked, though it does not exist in the K8s API #245

shurkanTwo opened this issue Feb 15, 2023 · 2 comments · May be fixed by #246

Comments

@shurkanTwo
Copy link

Describe the bug

When checking a cluster that is running Kubernetes 1.24.X, popeye fails with the following error message:

Boom! No resource meta found for policy/v1/podsecuritypolicies

This should be due to the fact that PSPs have never graduated to v1 and have always been in beta state v1beta1 before they were removed with K8s version 1.25 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.25.md#podsecuritypolicy-is-removed-pod-security-admission-graduates-to-stable).

podSecurityPolicy is only listed within v1beta1 in the K8s API and not within v1:
https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.24/

To Reproduce

Just run popeye version v0.11.0 against a cluster with e.g. version 1.24.7

Expected behavior

Results being displayed

Screenshots

none

Versions (please complete the following information):

OS: Ubuntu 22.04.1 LTS
Popeye: 0.11.0
K8s: v1.24.7+rke2r1

Additional context
none
@shurkanTwo shurkanTwo mentioned this issue Feb 15, 2023
Closed
@gargrag gargrag mentioned this issue Feb 15, 2023
Open
@gargrag
Copy link

gargrag commented Feb 15, 2023

I just proposed a fix @shurkanTwo

@davidkmenta
Copy link

According to this issue — could you please leave old releases in the homebrew repository? Just in case to be able to downgrade the package. Thanks.

@derailed derailed mentioned this issue Feb 20, 2023
Merged
@matheusfm matheusfm mentioned this issue Feb 24, 2023
Merged
3 tasks
yalctay93 pushed a commit to mercedes-benz/popeye that referenced this issue May 23, 2023
@derailed @yalctay93
fix derailed#245
ac83b93
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Fix podsecuritypolicy checking for clusters below 1.25 gargrag/popeye
3 participants
@davidkmenta @gargrag @shurkanTwo