Updated on 2024-01-26 GMT+08:00

Discarded Kubernetes Resources

Check Item

Check whether there are discarded resources in the clusters.

Solution

Scenario 1: The PodSecurityPolicy resource object has been discarded since clusters of 1.25.

Run the kubectl get psp -A command in the cluster to obtain the existing PSP object.

If these two objects are not used, skip the check. Otherwise, upgrade the corresponding functions to PodSecurity by referring to Pod Security.

Scenario 2: The Service in the clusters of 1.25 or later has discarded annotation: tolerate-unready-endpoints.

Check whether the Service provided in the log information contains the annotation of tolerate-unready-endpoints. If yes, replace the annotation with the following fields:

publishNotReadyAddresses: true