chore(deps): update helm release amazon-eks-pod-identity-webhook to v2.4.1

[timtor-bot]

This PR contains the following updates:

Package	Update	Change
amazon-eks-pod-identity-webhook (source)	minor	2.3.0 -> 2.4.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

jkroepke/helm-charts (amazon-eks-pod-identity-webhook)

v2.4.1

Compare Source

A Kubernetes webhook for pods that need AWS IAM access

v2.4.0

Compare Source

A Kubernetes webhook for pods that need AWS IAM access

v2.3.2

Compare Source

A Kubernetes webhook for pods that need AWS IAM access

v2.3.1

Compare Source

A Kubernetes webhook for pods that need AWS IAM access

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

--- kubernetes/aws-identity-webhook Kustomization: flux-system/1-aws-identity-webhook HelmRelease: aws-identity-webhook/aws-identity-webhook

+++ kubernetes/aws-identity-webhook Kustomization: flux-system/1-aws-identity-webhook HelmRelease: aws-identity-webhook/aws-identity-webhook

@@ -11,13 +11,13 @@

   chart:
     spec:
       chart: amazon-eks-pod-identity-webhook
       sourceRef:
         kind: HelmRepository
         name: jkroepke
-      version: 2.3.0
+      version: 2.4.1
   interval: 1h
   maxHistory: 1
   values:
     config:
       annotationPrefix: eks.amazonaws.com
       defaultAwsRegion: ''

[github-actions]

--- HelmRelease: aws-identity-webhook/aws-identity-webhook ServiceAccount: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

+++ HelmRelease: aws-identity-webhook/aws-identity-webhook ServiceAccount: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

@@ -4,8 +4,7 @@

 metadata:
   name: aws-identity-webhook-amazon-eks-pod-identity-webhook
   namespace: aws-identity-webhook
   labels:
     app.kubernetes.io/name: amazon-eks-pod-identity-webhook
     app.kubernetes.io/instance: aws-identity-webhook
-    app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: aws-identity-webhook/aws-identity-webhook ClusterRole: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

+++ HelmRelease: aws-identity-webhook/aws-identity-webhook ClusterRole: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

@@ -3,17 +3,25 @@

 kind: ClusterRole
 metadata:
   name: aws-identity-webhook-amazon-eks-pod-identity-webhook
   labels:
     app.kubernetes.io/name: amazon-eks-pod-identity-webhook
     app.kubernetes.io/instance: aws-identity-webhook
-    app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
   - ''
   resources:
   - serviceaccounts
   verbs:
   - get
   - watch
   - list
+- apiGroups:
+  - certificates.k8s.io
+  resources:
+  - certificatesigningrequests
+  verbs:
+  - create
+  - get
+  - list
+  - watch
 
--- HelmRelease: aws-identity-webhook/aws-identity-webhook ClusterRoleBinding: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

+++ HelmRelease: aws-identity-webhook/aws-identity-webhook ClusterRoleBinding: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

@@ -3,13 +3,12 @@

 kind: ClusterRoleBinding
 metadata:
   name: aws-identity-webhook-amazon-eks-pod-identity-webhook
   labels:
     app.kubernetes.io/name: amazon-eks-pod-identity-webhook
     app.kubernetes.io/instance: aws-identity-webhook
-    app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: aws-identity-webhook-amazon-eks-pod-identity-webhook
 subjects:
 - kind: ServiceAccount
--- HelmRelease: aws-identity-webhook/aws-identity-webhook Service: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

+++ HelmRelease: aws-identity-webhook/aws-identity-webhook Service: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

@@ -4,22 +4,23 @@

 metadata:
   name: aws-identity-webhook-amazon-eks-pod-identity-webhook
   namespace: aws-identity-webhook
   labels:
     app.kubernetes.io/name: amazon-eks-pod-identity-webhook
     app.kubernetes.io/instance: aws-identity-webhook
-    app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
   ports:
   - port: 8443
     targetPort: https
     protocol: TCP
+    appProtocol: https
     name: https
   - port: 9999
     targetPort: metrics
+    appProtocol: http
     protocol: TCP
     name: metrics
   selector:
     app.kubernetes.io/name: amazon-eks-pod-identity-webhook
     app.kubernetes.io/instance: aws-identity-webhook
 
--- HelmRelease: aws-identity-webhook/aws-identity-webhook Deployment: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

+++ HelmRelease: aws-identity-webhook/aws-identity-webhook Deployment: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

@@ -4,13 +4,12 @@

 metadata:
   name: aws-identity-webhook-amazon-eks-pod-identity-webhook
   namespace: aws-identity-webhook
   labels:
     app.kubernetes.io/name: amazon-eks-pod-identity-webhook
     app.kubernetes.io/instance: aws-identity-webhook
-    app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
   selector:
     matchLabels:
       app.kubernetes.io/name: amazon-eks-pod-identity-webhook
       app.kubernetes.io/instance: aws-identity-webhook
@@ -19,64 +18,74 @@

       labels:
         app.kubernetes.io/name: amazon-eks-pod-identity-webhook
         app.kubernetes.io/instance: aws-identity-webhook
     spec:
       containers:
       - name: amazon-eks-pod-identity-webhook
+        image: docker.io/amazon/amazon-eks-pod-identity-webhook:v0.6.1
+        imagePullPolicy: IfNotPresent
+        command:
+        - /webhook
+        - --annotation-prefix=eks.amazonaws.com
+        - --aws-default-region=
+        - --in-cluster=false
+        - --logtostderr
+        - --namespace=$(POD_NAMESPACE)
+        - --metrics-port=9999
+        - --port=8443
+        - --service-name=aws-identity-webhook-amazon-eks-pod-identity-webhook
+        - --sts-regional-endpoint=false
+        - --token-audience=sts.amazonaws.com
+        - --token-expiration=86400
+        - --token-mount-path=/var/run/secrets/eks.amazonaws.com/serviceaccount
+        - --tls-cert=/etc/webhook/certs/tls.crt
+        - --tls-key=/etc/webhook/certs/tls.key
+        ports:
+        - name: https
+          containerPort: 8443
+          protocol: TCP
+        - name: metrics
+          containerPort: 9999
+          protocol: TCP
+        env:
+        - name: POD_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: https
+            scheme: HTTPS
+        readinessProbe:
+          httpGet:
+            path: /healthz
+            port: https
+            scheme: HTTPS
+        resources:
+          limits: {}
+          requests: {}
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsGroup: 65534
           runAsNonRoot: true
           runAsUser: 65534
           seccompProfile:
             type: RuntimeDefault
-        image: docker.io/amazon/amazon-eks-pod-identity-webhook:v0.6.1
-        imagePullPolicy: IfNotPresent
-        command:
-        - /webhook
-        - --annotation-prefix=eks.amazonaws.com
-        - --aws-default-region=
-        - --in-cluster=false
-        - --logtostderr
-        - --namespace=aws-identity-webhook
-        - --metrics-port=9999
-        - --port=8443
-        - --sts-regional-endpoint=false
-        - --token-audience=sts.amazonaws.com
-        - --token-expiration=86400
-        - --token-mount-path=/var/run/secrets/eks.amazonaws.com/serviceaccount
-        - --tls-cert=/etc/webhook/certs/tls.crt
-        - --tls-key=/etc/webhook/certs/tls.key
         volumeMounts:
         - name: cert
           mountPath: /etc/webhook/certs
           readOnly: true
-        ports:
-        - name: https
-          containerPort: 8443
-          protocol: TCP
-        - name: metrics
-          containerPort: 9999
-          protocol: TCP
-        livenessProbe:
-          httpGet:
-            path: /healthz
-            port: https
-        readinessProbe:
-          httpGet:
-            path: /healthz
-            port: https
-        resources:
-          limits: {}
-          requests: {}
       hostNetwork: false
       serviceAccountName: aws-identity-webhook-amazon-eks-pod-identity-webhook
-      securityContext: {}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       volumes:
       - name: cert
         secret:
           secretName: aws-identity-webhook-amazon-eks-pod-identity-webhook-cert
 
--- HelmRelease: aws-identity-webhook/aws-identity-webhook Issuer: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

+++ HelmRelease: aws-identity-webhook/aws-identity-webhook Issuer: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

@@ -4,10 +4,9 @@

 metadata:
   name: aws-identity-webhook-amazon-eks-pod-identity-webhook
   namespace: aws-identity-webhook
   labels:
     app.kubernetes.io/name: amazon-eks-pod-identity-webhook
     app.kubernetes.io/instance: aws-identity-webhook
-    app.kubernetes.io/managed-by: Helm
 spec:
   selfSigned: {}
 
--- HelmRelease: aws-identity-webhook/aws-identity-webhook MutatingWebhookConfiguration: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

+++ HelmRelease: aws-identity-webhook/aws-identity-webhook MutatingWebhookConfiguration: aws-identity-webhook/aws-identity-webhook-amazon-eks-pod-identity-webhook

@@ -22,12 +22,15 @@

     apiVersions:
     - v1
     resources:
     - pods
   objectSelector:
     matchExpressions:
+    - key: eks.amazonaws.com/skip-pod-identity-webhook
+      operator: DoesNotExist
+      values: []
     - key: app.kubernetes.io/name
       operator: NotIn
       values:
       - amazon-eks-pod-identity-webhook
   sideEffects: None
   admissionReviewVersions: