Research Pod Security Policy (PSP) deprecation

[MKlimuszka]

In Kubernetes 1.25, Pod Security Policy (PSP) is being deprecated and replaced with Pod Security Admissions (PSA). Check how upstream charts are handling this change and report results on this ticket. This will be used to inform how our charts should handle this change.

[prachidamle]

Please check with @aiyengar2 and @pennyscissors if you face any issues in researching/handling this for our charts! cc @MKlimuszka

[eliyamlevy]

As we move to kubernetes 1.25 PSP will be deprecated, the new security method is called PSAs and it will take some work to migrate to from our previous security policies.

Migrating to PSA from the PSP:

• Review namespace permissions
  • PSA is controlled by labels on namespaces, so anyone with the permissions to create/update a namespace can bypass a more restrictive policy
  • If it must be allowed for an unprivileged user has these permissions look into creating additional restrictions on setting Pod Security labels through Dynamic Admission Control.
• Simplify & standardize PodSecurityPolicies
  • Eliminate purely mutating fields
  • Eliminate options not covered by the Pod Security Standards
    • There are several fields in PodSecurityPolicy that are not covered by the Pod Security Standards. If you must enforce these options, you will need to supplement Pod Security Admission with an admission webhook
  • Rollout the updated PSPs
    • Proceed with caution, as removing the mutating options may result in workloads missing required configuration
• Update Namespaces
  • These steps will have to be followed for every namespace
    • Identify an appropriate Pod Security Level
    • Verify Pod Security Level
      • Pod Security comes with some tools to help do this
        • You can dry run the policy which will evaluate the pods currently in the namespace against the applied policy. This command will return a warning for any existing pods that are not valid under the proposed level.
        • The second option is better for catching workloads that are not currently running: audit mode. When running under audit-mode (as opposed to enforcing), pods that violate the policy level are recorded in the audit logs.
    • Enforce Pod Security Level
    • Bypass PodSecurityPolicy
• Review namespace creation processes
• Disable PodSecurityPolicy

For more detailed info see this page.

Other Alternatives

With Kubernetes validating admission webhooks and OPA (Open Policy Agent), 
you can perform the same built-in checks that PSP provides and potentially more, like enforcing checks on resources such as Services, CronJobs, etc., or evaluating any configuration in those resources rather than only the checks that PSP supports.

Kubernetes mutating admission controllers can also address more use cases by modifying resources or patching them in different ways.

Use the PodSecurity admission controller. You can use the PodSecurity admission controller to apply Pod Security Standards to Pods running on your GKE Standard and Autopilot clusters. Pod Security Standards are predefined security policies that meet the high-level needs of Pod security in Kubernetes. These policies are cumulative, and range from being highly permissive to being highly restrictive.

Suse has also published an article on migrating your psp's to Kubewarden. Article can be found here.

Helpful Links and Sources

• https://kubernetes.io/blog/2021/04/06/podsecuritypolicy-deprecation-past-present-and-future/
• https://kubernetes.io/docs/tasks/configure-pod-container/migrate-from-psp/
• https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/
• https://blog.aquasec.com/kubernetess-policy
• https://cloud.google.com/kubernetes-engine/docs/deprecations/podsecuritypolicy

Upstream Examples and Discussions

• Grafana
  • Various charts depending on deprecated kubernetes APIs grafana/helm-charts#748
• Istio
  • Support Kubernetes 1.25 - migrate off deprecated items istio/istio#34479
• Ingress-Ngnix
  • Latest release only has support for k8s 1.24
  • Migrate Documentation away from PSP kubernetes/ingress-nginx#7852
    • Issue on moving documentation away from PSP
• Prometheus
  • From 27.x to 28.x Changelogs
    • This version disables PodSecurityPolicies by default because they are deprecated in Kubernetes 1.21 and will be removed in Kubernetes 1.25.
    • If you are using PodSecurityPolicies you can enable the previous behaviour by setting kube-state-metrics.podSecurityPolicy.enabled, prometheus-node-exporter.rbac.pspEnabled, grafana.rbac.pspEnabled and global.rbac.pspEnabled to true.
    • https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/README.md
• Sonobuoy
  • Sonobuoy following suit with kubernetes and moving to a new registry in preperation for 1.25. They did not mention PSP deprecation
  • Switch from k8s.gcr.io to registry.k8s.io vmware-tanzu/sonobuoy#1734

I've also generated a list (attached below) of all the charts and their respective versions which use deprecated apis like PSP.

JSON Formatted List

```json { "sriov-crd": { "100.0.3+up0.1.0": [], "100.0.2+up0.1.0": [], "100.0.1+up0.1.0": [], "100.0.0+up0.1.0": [] }, "rancher-eks-operator": { "100.0.3+up1.1.4-rc4": [], "100.0.2+up1.1.3": [], "100.0.1+up1.1.2": [], "100.0.0+up1.1.1": [] }, "rancher-prom2teams": { "100.0.0+up0.2.0": { "kind": "PodSecurityPolicy", "name": "release-name-prom2teams-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.2.000": { "kind": "PodSecurityPolicy", "name": "release-name-prom2teams-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.2.100+up0.2.0": { "kind": "PodSecurityPolicy", "name": "release-name-prom2teams-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "rancher-pushprox": { "0.1.400": { "kind": "PodSecurityPolicy", "name": "pushprox-component-proxy", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.300": { "kind": "PodSecurityPolicy", "name": "pushprox-component-proxy", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0": { "kind": "PodSecurityPolicy", "name": "pushprox-component-proxy", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.1": { "kind": "PodSecurityPolicy", "name": "pushprox-component-proxy", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.201": { "kind": "PodSecurityPolicy", "name": "pushprox-component-proxy", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.0": { "kind": "PodSecurityPolicy", "name": "pushprox-component-client", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.1": { "kind": "PodSecurityPolicy", "name": "pushprox-component-client", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.2": { "kind": "PodSecurityPolicy", "name": "pushprox-component-proxy", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.501": { "kind": "PodSecurityPolicy", "name": "pushprox-component-proxy", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "rancher-project-monitoring": { "0.1.0": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-proje-prometheus", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "rancher-sachet": { "1.0.200": { "kind": "PodSecurityPolicy", "name": "release-name-sachet-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0": { "kind": "PodSecurityPolicy", "name": "release-name-sachet-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.0.100": { "kind": "PodSecurityPolicy", "name": "release-name-sachet-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "harvester-cloud-provider": { "100.0.2+up0.1.12": [], "100.0.1+up0.1.8": [], "100.0.0+up0.1.8": [] }, "fleet-agent": { "0.3.000": [], "100.0.1+up0.3.7": [], "0.3.400": [], "0.3.300": [], "0.3.200": [], "100.0.2+up0.3.8": [], "100.0.3+up0.3.9": [], "100.0.4+up0.3.10-rc5": [], "0.3.100": [], "100.0.0+up0.3.6": [], "0.3.500": [], "0.3.900+up0.3.9": [] }, "rancher-node-exporter": { "100.0.0+up1.18.1": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-node-exporter", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.18.100+up1.18.1": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-node-exporter", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.16.201": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-node-exporter", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "rancher-istio": { "100.1.0+up1.11.4": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.4.0+up1.14.1": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.9.600": [], "1.9.300": [], "100.3.0+up1.13.3": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.2+up1.10.4": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0+up1.10.4": [], "1.9.800": [], "1.7.100": [], "100.2.0+up1.12.6": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.8.500": [], "100.1.3+up1.11.8": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.8.600": [], "1.10.400": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.7.300": [], "1.9.500": [], "1.7.301": [], "100.0.1+up1.10.4": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.8.300": [], "100.1.2+up1.11.7": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.2.1+up1.12.6": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.1+up1.11.7": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.11.700": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.11.701": { "kind": "PodSecurityPolicy", "name": "istio-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "neuvector-crd": { "100.0.0+up2.2.0": [] }, "rancher-aks-operator": { "100.0.3+up1.0.4": [], "100.0.5+up1.0.6": [], "100.0.4+up1.0.5": [], "100.0.1+up1.0.2": [], "100.0.0+up1.0.1": [], "100.0.2+up1.0.3": [] }, "rancher-backup": { "2.1.3-rc5": { "kind": "PodSecurityPolicy", "name": "rancher-backup-patch-sa", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "2.0.1": { "kind": "PodSecurityPolicy", "name": "rancher-backup-patch-sa", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "2.0.0": { "kind": "PodSecurityPolicy", "name": "rancher-backup-patch-sa", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.0.400": [], "1.2.100+up1.2.1": { "kind": "PodSecurityPolicy", "name": "rancher-backup-patch-sa", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.0.301": [], "1.0.300": [], "1.2.0": { "kind": "PodSecurityPolicy", "name": "rancher-backup-patch-sa", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "2.1.2": { "kind": "PodSecurityPolicy", "name": "rancher-backup-patch-sa", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "2.1.0": { "kind": "PodSecurityPolicy", "name": "rancher-backup-patch-sa", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "2.1.1": { "kind": "PodSecurityPolicy", "name": "rancher-backup-patch-sa", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.0.200": [], "1.0.201": [] }, "rancher-alerting-drivers": { "1.0.100": [], "100.0.2": [], "100.0.3": [], "100.0.0": [], "100.0.1": [], "1.0.301": [], "1.0.200": [] }, "rancher-wins-upgrader": { "100.0.1+up0.0.1": { "kind": "PodSecurityPolicy", "name": "wins-upgrader", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0+up0.0.1": { "kind": "PodSecurityPolicy", "name": "wins-upgrader", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.0.100": { "kind": "PodSecurityPolicy", "name": "wins-upgrader", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "rancher-kiali-server-crd": { "1.35.100+up1.35.0": [], "1.23.001": { "kind": "CustomResourceDefinition", "name": "monitoringdashboards.monitoring.kiali.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "100.0.0+up1.35.0": [], "1.24.001": { "kind": "CustomResourceDefinition", "name": "monitoringdashboards.monitoring.kiali.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.29.000": { "kind": "CustomResourceDefinition", "name": "monitoringdashboards.monitoring.kiali.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.32.100": [], "1.24.003": { "kind": "CustomResourceDefinition", "name": "monitoringdashboards.monitoring.kiali.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" } }, "rancher-prometheus-adapter": { "2.14.0": { "kind": "APIService", "name": "v1beta1.custom.metrics.k8s.io", "deprecated": "true", "apiVersion": "apiregistration.k8s.io/v1beta1", "removed": "true", "replacement": "apiregistration.k8s.io/v1" }, "100.0.0+up2.14.0": { "kind": "APIService", "name": "v1beta1.custom.metrics.k8s.io", "deprecated": "true", "apiVersion": "apiregistration.k8s.io/v1beta1", "removed": "true", "replacement": "apiregistration.k8s.io/v1" }, "2.12.101": { "kind": "APIService", "name": "v1beta1.custom.metrics.k8s.io", "deprecated": "true", "apiVersion": "apiregistration.k8s.io/v1beta1", "removed": "true", "replacement": "apiregistration.k8s.io/v1" } }, "rancher-gatekeeper": { "100.0.1+up3.6.0": { "kind": "PodSecurityPolicy", "name": "gatekeeper-admin", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.2.0+up3.8.1": { "kind": "PodDisruptionBudget", "name": "gatekeeper-controller-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "policy/v1" }, "100.1.0+up3.7.1": { "kind": "PodDisruptionBudget", "name": "gatekeeper-controller-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "policy/v1" }, "100.0.0+up3.5.1": { "kind": "PodDisruptionBudget", "name": "gatekeeper-controller-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "policy/v1" }, "3.3.001": { "kind": "ValidatingWebhookConfiguration", "name": "gatekeeper-validating-webhook-configuration", "deprecated": "true", "apiVersion": "admissionregistration.k8s.io/v1beta1", "removed": "true", "replacement": "admissionregistration.k8s.io/v1" }, "3.3.000": { "kind": "ValidatingWebhookConfiguration", "name": "gatekeeper-validating-webhook-configuration", "deprecated": "true", "apiVersion": "admissionregistration.k8s.io/v1beta1", "removed": "true", "replacement": "admissionregistration.k8s.io/v1" }, "3.2.101": { "kind": "ValidatingWebhookConfiguration", "name": "gatekeeper-validating-webhook-configuration", "deprecated": "true", "apiVersion": "admissionregistration.k8s.io/v1beta1", "removed": "true", "replacement": "admissionregistration.k8s.io/v1" }, "3.1.100": { "kind": "ValidatingWebhookConfiguration", "name": "gatekeeper-validating-webhook-configuration", "deprecated": "true", "apiVersion": "admissionregistration.k8s.io/v1beta1", "removed": "true", "replacement": "admissionregistration.k8s.io/v1" }, "3.1.101": { "kind": "ValidatingWebhookConfiguration", "name": "gatekeeper-validating-webhook-configuration", "deprecated": "true", "apiVersion": "admissionregistration.k8s.io/v1beta1", "removed": "true", "replacement": "admissionregistration.k8s.io/v1" } }, "rancher-kiali-server": { "1.35.100+up1.35.0": { "kind": "Ingress", "name": "kiali", "deprecated": "true", "apiVersion": "networking.k8s.io/v1beta1", "removed": "true", "replacement": "networking.k8s.io/v1" }, "1.23.001": { "kind": "Ingress", "name": "kiali", "deprecated": "true", "apiVersion": "extensions/v1beta1", "removed": "true", "replacement": "networking.k8s.io/v1" }, "100.0.0+up1.35.0": { "kind": "Ingress", "name": "kiali", "deprecated": "true", "apiVersion": "networking.k8s.io/v1beta1", "removed": "true", "replacement": "networking.k8s.io/v1" }, "1.24.001": { "kind": "Ingress", "name": "kiali", "deprecated": "true", "apiVersion": "extensions/v1beta1", "removed": "true", "replacement": "networking.k8s.io/v1" }, "1.41.0": { "kind": "Ingress", "name": "kiali", "deprecated": "true", "apiVersion": "networking.k8s.io/v1beta1", "removed": "true", "replacement": "networking.k8s.io/v1" }, "1.29.000": { "kind": "Ingress", "name": "kiali", "deprecated": "true", "apiVersion": "networking.k8s.io/v1beta1", "removed": "true", "replacement": "networking.k8s.io/v1" }, "1.32.100": { "kind": "Ingress", "name": "kiali", "deprecated": "true", "apiVersion": "networking.k8s.io/v1beta1", "removed": "true", "replacement": "networking.k8s.io/v1" }, "1.24.003": { "kind": "Ingress", "name": "kiali", "deprecated": "true", "apiVersion": "extensions/v1beta1", "removed": "true", "replacement": "networking.k8s.io/v1" } }, "rancher-monitoring-crd": { "100.1.3+up19.0.3": { "kind": "PodSecurityPolicy", "name": "rancher-monitoring-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "9.4.200": [], "9.4.202": { "kind": "PodSecurityPolicy", "name": "rancher-monitoring-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "9.4.203": { "kind": "PodSecurityPolicy", "name": "rancher-monitoring-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "16.6.0": { "kind": "PodSecurityPolicy", "name": "rancher-monitoring-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "14.5.100": { "kind": "PodSecurityPolicy", "name": "rancher-monitoring-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.2+up19.0.3": { "kind": "PodSecurityPolicy", "name": "rancher-monitoring-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.0+up19.0.3": { "kind": "PodSecurityPolicy", "name": "rancher-monitoring-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.1+up19.0.3": { "kind": "PodSecurityPolicy", "name": "rancher-monitoring-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "16.6.1+up16.6.0": { "kind": "PodSecurityPolicy", "name": "rancher-monitoring-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0+up16.6.0": { "kind": "PodSecurityPolicy", "name": "rancher-monitoring-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "9.4.201": [] }, "rancher-csp-adapter": { "1.0.0+up1.0.0-rc4": [] }, "rio": { "0.8.001": [], "0.8.000": [] }, "sriov": { "100.0.3+up0.1.0": [], "100.0.2+up0.1.0": [], "100.0.1+up0.1.0": [], "100.0.0+up0.1.0": [] }, "rancher-gatekeeper-crd": { "100.0.1+up3.6.0": { "kind": "PodSecurityPolicy", "name": "rancher-gatekeeper-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.2.0+up3.8.1": { "kind": "PodSecurityPolicy", "name": "rancher-gatekeeper-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.0+up3.7.1": { "kind": "PodSecurityPolicy", "name": "rancher-gatekeeper-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0+up3.5.1": { "kind": "PodSecurityPolicy", "name": "rancher-gatekeeper-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "3.3.001": { "kind": "PodSecurityPolicy", "name": "rancher-gatekeeper-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "3.3.000": { "kind": "PodSecurityPolicy", "name": "rancher-gatekeeper-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "3.2.101": { "kind": "PodSecurityPolicy", "name": "rancher-gatekeeper-crd-manager", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "3.1.100": { "kind": "CustomResourceDefinition", "name": "constrainttemplatepodstatuses.status.gatekeeper.sh", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "3.1.101": { "kind": "CustomResourceDefinition", "name": "constrainttemplatepodstatuses.status.gatekeeper.sh", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" } }, "longhorn": { "1.1.001": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.1.000": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.1+up1.2.3": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.1.100": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.2.300+up1.2.3": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.1+up1.1.3": [], "100.2.0+up1.3.0": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.2+up1.2.4": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.2.200+up1.2.2": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0+up1.1.2": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.0+up1.2.2": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.1.300+up1.1.3": [], "1.0.200": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.0.201": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.1.200+up1.1.2": { "kind": "PodSecurityPolicy", "name": "longhorn-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "rancher-logging-crd": { "100.1.2+up3.17.4": [], "100.1.1+up3.17.3": [], "100.1.0+up3.17.3": [], "3.8.201": { "kind": "CustomResourceDefinition", "name": "outputs.logging.banzaicloud.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "3.15.0": [], "100.0.1+up3.15.0": [], "3.9.400": { "kind": "CustomResourceDefinition", "name": "outputs.logging.banzaicloud.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "3.9.000": { "kind": "CustomResourceDefinition", "name": "outputs.logging.banzaicloud.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "100.0.0+up3.12.0": [], "100.1.3+up3.17.7": [], "3.6.000": { "kind": "CustomResourceDefinition", "name": "outputs.logging.banzaicloud.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "3.6.001": { "kind": "CustomResourceDefinition", "name": "outputs.logging.banzaicloud.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" } }, "rancher-vsphere-csi": { "100.3.0+up2.5.1-rancher1": [], "2.3.0": [], "2.3.1": [], "100.0.0": [], "2.1.000": [], "100.2.0+up2.4.1-rancher1": [], "100.0.1+up2.1.1": [], "100.1.0+up2.3.0": [], "2.1.1": [] }, "longhorn-crd": { "1.1.001": [], "1.1.000": [], "100.1.1+up1.2.3": [], "1.1.100": [], "1.2.300+up1.2.3": [], "100.0.1+up1.1.3": [], "100.2.0+up1.3.0": [], "100.1.2+up1.2.4": [], "1.2.200+up1.2.2": [], "100.0.0+up1.1.2": [], "100.1.0+up1.2.2": [], "1.1.300+up1.1.3": [], "1.0.200": { "kind": "CustomResourceDefinition", "name": "instancemanagers.longhorn.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.0.201": { "kind": "CustomResourceDefinition", "name": "instancemanagers.longhorn.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.1.200+up1.1.2": [] }, "system-upgrade-controller": { "100.0.3+up0.3.2": { "kind": "PodSecurityPolicy", "name": "system-upgrade-controller", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.2+up0.3.2": { "kind": "PodSecurityPolicy", "name": "system-upgrade-controller", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0+up0.3.0": [], "100.0.1+up0.3.1": [] }, "rancher-vsphere-cpi": { "1.0.1": [], "1.0.100": [], "100.0.0": [], "100.2.0+up1.1.0": [], "1.0.000": [], "100.4.0+up1.2.2": [], "100.1.0+up1.0.100": [], "100.3.0+up1.2.1": [] }, "neuvector": { "100.0.0+up2.2.0": [] }, "rancher-gke-operator-crd": { "100.0.2+up1.1.3": [], "100.0.1+up1.1.2": [], "100.0.3+up1.1.4-rc2": [], "100.0.0+up1.1.1": { "kind": "CustomResourceDefinition", "name": "gkeclusterconfigs.gke.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" } }, "rancher-cis-benchmark": { "2.0.4": [], "2.0.3": [], "2.0.2": [], "2.0.1": [], "1.0.100": { "kind": "ClusterRoleBinding", "name": "cis-operator-rolebinding", "deprecated": "true", "apiVersion": "rbac.authorization.k8s.io/v1beta1", "removed": "true", "replacement": "rbac.authorization.k8s.io/v1" }, "1.0.400": { "kind": "ClusterRoleBinding", "name": "cis-operator-rolebinding", "deprecated": "true", "apiVersion": "rbac.authorization.k8s.io/v1beta1", "removed": "true", "replacement": "rbac.authorization.k8s.io/v1" }, "2.0.0": [], "2.0.5-rc6": [], "1.0.700": { "kind": "ClusterRoleBinding", "name": "cis-operator-rolebinding", "deprecated": "true", "apiVersion": "rbac.authorization.k8s.io/v1beta1", "removed": "true", "replacement": "rbac.authorization.k8s.io/v1" }, "1.0.301": { "kind": "ClusterRoleBinding", "name": "cis-operator-rolebinding", "deprecated": "true", "apiVersion": "rbac.authorization.k8s.io/v1beta1", "removed": "true", "replacement": "rbac.authorization.k8s.io/v1" }, "1.0.300": { "kind": "ClusterRoleBinding", "name": "cis-operator-rolebinding", "deprecated": "true", "apiVersion": "rbac.authorization.k8s.io/v1beta1", "removed": "true", "replacement": "rbac.authorization.k8s.io/v1" }, "1.0.600": { "kind": "ClusterRoleBinding", "name": "cis-operator-rolebinding", "deprecated": "true", "apiVersion": "rbac.authorization.k8s.io/v1beta1", "removed": "true", "replacement": "rbac.authorization.k8s.io/v1" }, "1.0.200": { "kind": "ClusterRoleBinding", "name": "cis-operator-rolebinding", "deprecated": "true", "apiVersion": "rbac.authorization.k8s.io/v1beta1", "removed": "true", "replacement": "rbac.authorization.k8s.io/v1" } }, "rancher-windows-gmsa": { "1.0.0": [] }, "rancher-backup-crd": { "2.1.3-rc5": [], "2.0.1": { "kind": "CustomResourceDefinition", "name": "restores.resources.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "2.0.0": { "kind": "CustomResourceDefinition", "name": "restores.resources.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.0.400": { "kind": "CustomResourceDefinition", "name": "restores.resources.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.2.100+up1.2.1": { "kind": "CustomResourceDefinition", "name": "restores.resources.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.0.301": { "kind": "CustomResourceDefinition", "name": "restores.resources.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.0.300": { "kind": "CustomResourceDefinition", "name": "restores.resources.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.2.0": { "kind": "CustomResourceDefinition", "name": "restores.resources.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "2.1.2": [], "2.1.0": [], "2.1.1": [], "1.0.200": { "kind": "CustomResourceDefinition", "name": "restores.resources.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.0.201": { "kind": "CustomResourceDefinition", "name": "restores.resources.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" } }, "rancher-windows-exporter": { "0.1.000": { "kind": "PodSecurityPolicy", "name": "release-name-windows-exporter", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.100": { "kind": "PodSecurityPolicy", "name": "release-name-windows-exporter", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0": { "kind": "PodSecurityPolicy", "name": "release-name-windows-exporter", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "rancher-gke-operator": { "100.0.2+up1.1.3": [], "100.0.1+up1.1.2": [], "100.0.3+up1.1.4-rc2": [], "100.0.0+up1.1.1": [] }, "rancher-windows-gmsa-crd": { "1.0.0": [] }, "rancher-tracing": { "1.20.001": [], "1.20.100": [], "1.20.002": [], "1.31.0": [], "100.0.0": [] }, "rancher-logging": { "100.1.2+up3.17.4": { "kind": "PodSecurityPolicy", "name": "psp.logging-operator", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.1+up3.17.3": { "kind": "PodSecurityPolicy", "name": "psp.logging-operator", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.0+up3.17.3": { "kind": "PodSecurityPolicy", "name": "psp.logging-operator", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "3.8.201": { "kind": "ClusterRoleBinding", "name": "release-name-rancher-logging", "deprecated": "true", "apiVersion": "rbac.authorization.k8s.io/v1beta1", "removed": "true", "replacement": "rbac.authorization.k8s.io/v1" }, "3.15.0": { "kind": "PodSecurityPolicy", "name": "psp.logging-operator", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.1+up3.15.0": { "kind": "PodSecurityPolicy", "name": "psp.logging-operator", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "3.9.400": [], "3.9.000": [], "100.0.0+up3.12.0": { "kind": "PodSecurityPolicy", "name": "psp.logging-operator", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.3+up3.17.7": { "kind": "PodSecurityPolicy", "name": "psp.logging-operator", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "3.6.000": { "kind": "ClusterRoleBinding", "name": "release-name-rancher-logging", "deprecated": "true", "apiVersion": "rbac.authorization.k8s.io/v1beta1", "removed": "true", "replacement": "rbac.authorization.k8s.io/v1" }, "3.6.001": { "kind": "ClusterRoleBinding", "name": "release-name-rancher-logging", "deprecated": "true", "apiVersion": "rbac.authorization.k8s.io/v1beta1", "removed": "true", "replacement": "rbac.authorization.k8s.io/v1" } }, "rancher-webhook": { "0.1.000": [], "0.1.400+up0.1.4": { "kind": "PodSecurityPolicy", "name": "rancher-webhook-pre-delete", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.0.2+up0.2.2": { "kind": "PodSecurityPolicy", "name": "rancher-webhook-pre-delete", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.200+up0.1.2": { "kind": "PodSecurityPolicy", "name": "rancher-webhook-pre-delete", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.0.3+up0.2.5": { "kind": "PodSecurityPolicy", "name": "rancher-webhook-pre-delete", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.0.4+up0.2.5": { "kind": "PodSecurityPolicy", "name": "rancher-webhook-pre-delete", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.0-beta500": [], "0.1.0-beta900": [], "0.1.0-beta901": [], "1.0.5+up0.2.6-rc9": { "kind": "PodSecurityPolicy", "name": "rancher-webhook-pre-delete", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "1.0.0+up0.2.0": { "kind": "PodSecurityPolicy", "name": "rancher-webhook-pre-delete", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.100+up0.1.1": [], "1.0.1+up0.2.1": { "kind": "PodSecurityPolicy", "name": "rancher-webhook-pre-delete", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "0.1.0-beta700": [], "0.1.300+up0.1.3": { "kind": "PodSecurityPolicy", "name": "rancher-webhook-pre-delete", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "rancher-monitoring": { "100.1.3+up19.0.3": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "9.4.200": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "9.4.202": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "9.4.203": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "16.6.0": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "14.5.100": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.2+up19.0.3": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.0+up19.0.3": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.1.1+up19.0.3": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "16.6.1+up16.6.0": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0+up16.6.0": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "9.4.201": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-monit-admission", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "harvester-csi-driver": { "100.0.2+up0.1.11": [], "100.0.3+up0.1.14": [], "100.0.0+up0.1.9": [], "100.0.1+up0.1.9": [] }, "rancher-cis-benchmark-crd": { "2.0.4": [], "2.0.3": [], "2.0.2": [], "2.0.1": [], "1.0.100": { "kind": "CustomResourceDefinition", "name": "clusterscanreports.cis.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.0.400": { "kind": "CustomResourceDefinition", "name": "clusterscanreports.cis.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "2.0.0": [], "2.0.5-rc6": [], "1.0.700": { "kind": "CustomResourceDefinition", "name": "clusterscanreports.cis.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.0.301": { "kind": "CustomResourceDefinition", "name": "clusterscanreports.cis.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.0.300": { "kind": "CustomResourceDefinition", "name": "clusterscanreports.cis.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.0.600": { "kind": "CustomResourceDefinition", "name": "clusterscanreports.cis.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "1.0.200": { "kind": "CustomResourceDefinition", "name": "clusterscanreports.cis.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" } }, "rancher-aks-operator-crd": { "100.0.3+up1.0.4": [], "100.0.5+up1.0.6": [], "100.0.4+up1.0.5": [], "100.0.1+up1.0.2": [], "100.0.0+up1.0.1": [], "100.0.2+up1.0.3": [] }, "fleet-crd": { "0.3.000": { "kind": "CustomResourceDefinition", "name": "gitjobs.gitjob.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "100.0.1+up0.3.7": [], "0.3.400": { "kind": "CustomResourceDefinition", "name": "gitjobs.gitjob.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "0.3.300": { "kind": "CustomResourceDefinition", "name": "gitjobs.gitjob.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "0.3.200": { "kind": "CustomResourceDefinition", "name": "gitjobs.gitjob.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "100.0.2+up0.3.8": [], "100.0.3+up0.3.9": [], "100.0.4+up0.3.10-rc5": [], "0.3.100": { "kind": "CustomResourceDefinition", "name": "gitjobs.gitjob.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "100.0.0+up0.3.6": [], "0.3.500": { "kind": "CustomResourceDefinition", "name": "gitjobs.gitjob.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" }, "0.3.900+up0.3.9": [] }, "rancher-kube-state-metrics": { "2.13.101": [], "100.0.0+up3.2.0": [], "3.2.0": [] }, "rancher-eks-operator-crd": { "100.0.3+up1.1.4-rc4": [], "100.0.2+up1.1.3": [], "100.0.1+up1.1.2": [], "100.0.0+up1.1.1": { "kind": "CustomResourceDefinition", "name": "eksclusterconfigs.eks.cattle.io", "deprecated": "true", "apiVersion": "apiextensions.k8s.io/v1beta1", "removed": "true", "replacement": "apiextensions.k8s.io/v1" } }, "rancher-grafana": { "6.11.0": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-grafana-test", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "100.0.0+up6.11.0": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-grafana-test", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" }, "6.6.401": { "kind": "PodSecurityPolicy", "name": "release-name-rancher-grafana-test", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "fleet": { "0.3.000": [], "100.0.1+up0.3.7": [], "0.3.400": [], "0.3.300": [], "0.3.200": [], "100.0.2+up0.3.8": [], "100.0.3+up0.3.9": [], "100.0.4+up0.3.10-rc5": [], "0.3.100": [], "100.0.0+up0.3.6": [], "0.3.500": [], "0.3.900+up0.3.9": [] }, "prometheus-federator": { "0.1.0": { "kind": "PodSecurityPolicy", "name": "prometheus-federator-psp", "deprecated": "true", "apiVersion": "policy/v1beta1", "removed": "false", "replacement": "" } }, "rancher-external-ip-webhook": { "100.0.0+up1.0.0": { "kind": "ValidatingWebhookConfiguration", "name": "release-name-rancher-external-ip-webhook-validating-webhook-configuration", "deprecated": "true", "apiVersion": "admissionregistration.k8s.io/v1beta1", "removed": "true", "replacement": "admissionregistration.k8s.io/v1" }, "0.1.400": { "kind": "ValidatingWebhookConfiguration", "name": "release-name-rancher-external-ip-webhook-validating-webhook-configuration", "deprecated": "true", "apiVersion": "admissionregistration.k8s.io/v1beta1", "removed": "true", "replacement": "admissionregistration.k8s.io/v1" }, "100.0.1+up1.0.1": [], "0.1.600": { "kind": "ValidatingWebhookConfiguration", "name": "release-name-rancher-external-ip-webhook-validating-webhook-configuration", "deprecated": "true", "apiVersion": "admissionregistration.k8s.io/v1beta1", "removed": "true", "replacement": "admissionregistration.k8s.io/v1" }, "0.1.601": { "kind": "ValidatingWebhookConfiguration", "name": "release-name-rancher-external-ip-webhook-validating-webhook-configuration", "deprecated": "true", "apiVersion": "admissionregistration.k8s.io/v1beta1", "removed": "true", "replacement": "admissionregistration.k8s.io/v1" }, "100.0.2+up1.0.1": [] } } ```

[MKlimuszka]

the research is done, but 1.25 support still needs to be done