Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-55465

Phase out serving of admissionregistration/v1beta1 for 4.20

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • 4.20.0
    • 4.17.0
    • kube-apiserver
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • Done
    • Bug Fix
    • Hide
      * Before this update, some resources in the`admissionregistration.k8s.io/v1beta1` API were served in {product-title} 4.17, despite being intended for deprecation or technology preview. With this release, warnings will appear when the `v1beta1` resources are accessed via `oc`. `APIRemovedInNextReleaseInUse` and `APIRemovedInNextEUSReleaseInUse` alerts come up for cluster administrators when users are accessing the deprecated or technology preview resources. Administrators will need to acknowledge the upgrade from {product-title} 4.19 to 4.20. (link:https://issues.redhat.com/browse/OCPBUGS-55465[OCPBUGS-55465])
      Show
      * Before this update, some resources in the`admissionregistration.k8s.io/v1beta1` API were served in {product-title} 4.17, despite being intended for deprecation or technology preview. With this release, warnings will appear when the `v1beta1` resources are accessed via `oc`. `APIRemovedInNextReleaseInUse` and `APIRemovedInNextEUSReleaseInUse` alerts come up for cluster administrators when users are accessing the deprecated or technology preview resources. Administrators will need to acknowledge the upgrade from {product-title} 4.19 to 4.20. (link: https://issues.redhat.com/browse/OCPBUGS-55465 [ OCPBUGS-55465 ])
    • None
    • None
    • None
    • None

      We inadvertently shipped 4.17 with kube-apiserver serving admissionregistration.k8s.io/v1beta1. Users may have grown dependencies here, so we need to do a phased removal with admin ack requirement (begin flagging as deprecated in 4.17.z and stop serving for 4.20 GA).

      Noticed in https://github.com/openshift/api/pull/2249 and introduced in https://github.com/openshift/api/pull/1888 with intent to fix before GA in https://github.com/openshift/cluster-kube-apiserver-operator/pull/1687.

      Checklist:

      1. Register GVRs with deprecated API filter and backport to 4.18.z. Backporting to 4.17.z has little value because the alerts for this condition fire only for "removed in next" and "removed in next EUS".
        1. 4.20.0: https://github.com/openshift/kubernetes/pull/2287
        2. 4.19.z: https://github.com/openshift/kubernetes/pull/2290
        3. 4.18.z: https://github.com/openshift/kubernetes/pull/2333
      2. Disable serving this GV in cluster-kube-apiserver in 4.20.0+. (https://github.com/openshift/cluster-kube-apiserver-operator/pull/1836)
      3. Require admin ack for 4.19-to-4.20 upgrades. (https://github.com/openshift/cluster-version-operator/pull/1193)

       

              bluddy Ben Luddy
              bluddy Ben Luddy
              None
              None
              Wen Wang Wen Wang
              None
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: