Rke upgrade of k8s 1.24.4 to 1.25.0

hello guys does any one has a experience to upgrade rke kubernetes 1.24.4 to kubernetes 1.25.0 or later, got psp error:

ERRO[0147] Failed to upgrade hosts: rke01 with error [Failed to verify healthcheck: Failed to check https://localhost:6443/healthz for service [kube-apiserver] on host [10.63.0.11]: Get “https://localhost:6443/healthz”: Unable to access the service on localhost:6443. The service might be still starting up. Error: ssh: rejected: connect failed (Connection refused), log: E0716 14:12:53.805223 1 run.go:74] “command failed” err=“failed to initialize admission: couldn’t init admission plugin "PodSecurity": no kind "PodSecurityConfiguration" is registered for version "pod-security.admission.config.k8s.io/v1" in scheme "vendor/k8s.io/pod-security-admission/admission/api/scheme/scheme.go:30"”]
FATA[0147] [controlPlane] Failed to upgrade Control Plane: [[Failed to verify healthcheck: Failed to check https://localhost:6443/healthz for service [kube-apiserver] on host [10.63.0.11]: Get “https://localhost:6443/healthz”: Unable to access the service on localhost:6443. The service might be still starting up. Error: ssh: rejected: connect failed (Connection refused), log: E0716 14:12:53.805223 1 run.go:74] “command failed” err=“failed to initialize admission: couldn’t init admission plugin "PodSecurity": no kind "PodSecurityConfiguration" is registered for version "pod-security.admission.config.k8s.io/v1" in scheme "vendor/k8s.io/pod-security-admission/admission/api/scheme/scheme.go:30"”]]

i know that 1.25.0 k8s psp is depricated and cann’t resolve this issues

root@rke03:~# rke version
WARN[0000] This is not an officially supported version (v1.4.0-rc1) of RKE. Please download the latest official release at Releases · rancher/rke · GitHub
INFO[0000] Running RKE version: v1.4.0-rc1
Server Version: version.Info{Major:“1”, Minor:“24”, GitVersion:“v1.24.4”, GitCommit:“95ee5ab382d64cfe6c28967f36b53970b8374491”, GitTreeState:“clean”, BuildDate:“2022-08-17T18:47:37Z”, GoVersion:“go1.18.5”, Compiler:“gc”, Platform:“linux/amd64”}

rke version to use for upgrade
root@rke03:~# ./rke version
INFO[0000] Running RKE version: v1.4.7
Server Version: version.Info{Major:“1”, Minor:“24”, GitVersion:“v1.24.4”, GitCommit:“95ee5ab382d64cfe6c28967f36b53970b8374491”, GitTreeState:“clean”, BuildDate:“2022-08-17T18:47:37Z”, GoVersion:“go1.18.5”, Compiler:“gc”, Platform:“linux/amd64”}

in cluster.yml file from setup is set:
pod_security_policy: false

1 Like