PodSecurityPolicy is removed in 1.25

[Adam Dyess]

According to upstream documentation we'll need to remove/supplant PSP in the charm when the snap-channel option is 1.25/*

https://kubernetes.io/docs/concepts/security/pod-security-policy/

Templates:
https://github.com/charmed-kubernetes/charm-kubernetes-control-plane/blob/main/templates/rbac-pod-security-policy.yaml

Config:
https://github.com/charmed-kubernetes/charm-kubernetes-control-plane/blob/main/config.yaml#L324-L333

Code
https://github.com/charmed-kubernetes/charm-kubernetes-control-plane/blob/83f9d53e1522659e5df356e11b16cc67078a30c0/reactive/kubernetes_control_plane.py#L1889-L1908

should be addressed in order to let the charm startup the kube-apiserver appropriately

[George Kraft (cynerva)]

PR: https://github.com/charmed-kubernetes/charm-kubernetes-control-plane/pull/239

[Stone Preston (stonepreston)]

An issue was discovered with the previous fix, and it was fixed in https://github.com/charmed-kubernetes/charm-kubernetes-control-plane/pull/241

[Ebrar Leblebici (birru2)]

It seems we still have pod-security-policy config option. I deployed CK with kubernetes-control-plane in version 1.28.8 (rev 321) and still seeing this config option:

$ juju config kubernetes-control-plane | grep pod-security-policy
  pod-security-policy:
      [0] https://kubernetes.io/docs/concepts/policy/pod-security-policy/

[Adam Dyess (addyess)]

The config is still there. But it's inactive if the underlying cluster is running 1.25 and beyond.