Disable Pod Security Policy CheckingΒΆ

Note

PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier. PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25. Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using Pod Security Admission Controller

You can delete the previously added PodSecurityPolicy service parameter to disable pod security policy checking.

Procedure

  1. Remove the kubernetes kube_apiserver admission_plugins system parameter to exclude PodSecurityPolicy.

    ~(keystone_admin)]$ system service-parameter-delete <uuid>

  2. Apply the Kubernetes system parameters.

    ~(keystone_admin)]$ system service-parameter-apply kubernetes