UNCLASSIFIED - NO CUI

SPIKE: Identify packages/resources deprecated in Kubernetes 1.22+

As identified in the linked epic, there are a number of resource definitions/API versions that are deprecated starting in k8s 1.22. Review the linked list for deprecated API versions and run through ALL packages to compile a list of resources that need to be updated to support 1.22.

Types of issues to open upon conclusion:

  • If BB created/maintained Helm chart (not upstream): Open an issue for BB to update the helm chart/resource(s) to a newer API version
  • If upstream Helm chart and newer version is available without the deprecated resources: Open an issue for BB to pull in the latest upstream chart. As needed open tickets with IB to get the latest image available as well.
  • If upstream Helm chart and version without deprecated resources is NOT available: Open an upstream issue in the helm chart repo to upgrade to the latest API versions/remove deprecations. Open a blocked issue in BB to update to the newer upstream chart version with your upstream issue linked.

Tools that may be helpful in this check (thanks Tunde!):

Also note that using these tools may not provide a complete look since some pieces of helm charts can be conditional and wouldn't show up in a basic helm template.

Example result (note that this list is NOT real, just to provide an example of what we're looking for):

  • istio operator - CRD istio-operator (link to the file that is deprecated in chart/templates), open issue to update to the latest from upstream
  • istio operator - Webhook some-webhook-name (link to the file that is deprecated in chart/templates), open issue to update to the latest from upstream
  • mattermost - CRD mattermost-crd-name (link to the file that is deprecated in chart/templates), open issue for BB team to update chart to remove deprecations
  • velero - RBAC cluster-role-velero (link to the file that is deprecated in chart/templates), open issue upstream for Velero team to remove deprecations, open blocked BB issue to update to newest velero chart

AC:

  • Review the packages for API versions deprecated in v1.22 (https://kubernetes.io/docs/reference/using-api/deprecation-guide/) and compile a list of packages + the relevant resources that need to be updated to support 1.22+.
  • Open issues to resolve the deprecations (see notes above about type of issue to open), link issues to the epic and core/security team
Edited by Micah Nagel