Support for Pod Security Policies (preview) will no longer be available after June 30th, 2021 in Azure Kubernetes Service

[tomkerkhove]

Support for Pod Security Policies (preview) will no longer be available after June 30th, 2021 in Azure Kubernetes Service.

Deadline: October 15th, 2020 February 1st 2021 June 30th, 2021 (extended)
Impacted Services: Azure Kubernetes Service
More information:

• **Deprecating** May 3rd 2021: Support for Pod Security Policies (preview) Azure/AKS#968
• https://docs.microsoft.com/en-gb/azure/aks/use-pod-security-policies

Notice

Pod security policy (preview) will be deprecated on October 15th, 2020.

Impacted customers with existing preview clusters enabled with pod security policy (preview) were sent the communication email via admin emails on July 13th.
AKS release notes announced in 2020-07-06.

• Existing PSP document contains a warning with details.
  The succeeding feature, Azure Policy for AKS contains a deep dive document for pod security through Policy for AKS.

Impact

Pod Security Policies (preview) will no longer be available.

Required Action

Migrate to Azure Policy for AKS

Contact

N/A

More information

N/A

[azure-deprecation-automation]

This issue is automatically managed and suggest to use GitHub Discussions to discuss this deprecation.

[tomkerkhove]

Deprecation has been extended to February 1st 2021.

https://github.com/Azure/AKS/releases/tag/2020-09-21

[tomkerkhove]

Extended to June 30th, 2021, see Azure/AKS#2128

[tomkerkhove]

Update:

The feature described in this document, pod security policy (preview), will begin deprecation with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives. The previous deprecation announcement was made at the time as there was not a viable option for customers. Now that the Kubernetes community is working on an alternative, there no longer is a pressing need to deprecate ahead of Kubernetes.

After pod security policy (preview) is deprecated, you must disable the feature on any existing clusters using the deprecated feature to perform future cluster upgrades and stay within Azure support.

https://docs.microsoft.com/en-us/azure/aks/use-pod-security-policies