Merge pull request #8542 from zalando-incubator/eks-pod-identity-agen…

…t-admission-controller-exception Exclude eks-pod-identity-agent from admission-controller to avoid 🐔🥚
zalando-incubator · Nov 27, 2024 · a06687b · a06687b
2 parents 7beb20e + ae85a4d
commit a06687b
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/cluster/manifests/02-admission-control/teapot.yaml b/cluster/manifests/02-admission-control/teapot.yaml
@@ -17,6 +17,9 @@ webhooks:
         - key: k8s-app
           operator: NotIn
           values: ["kube-proxy"]
+        - key: app.kubernetes.io/name
+          operator: NotIn
+          values: ["eks-pod-identity-agent"]
 {{- end }}
     clientConfig:
       {{- if eq .Cluster.Provider "zalando-eks"}}
@@ -49,6 +52,9 @@ webhooks:
         - key: k8s-app
           operator: NotIn
           values: ["kube-proxy"]
+        - key: app.kubernetes.io/name
+          operator: NotIn
+          values: ["eks-pod-identity-agent"]
 {{- end }}
     clientConfig:
       {{- if eq .Cluster.Provider "zalando-eks"}}
@@ -341,6 +347,9 @@ webhooks:
         - key: k8s-app
           operator: NotIn
           values: ["kube-proxy"]
+        - key: app.kubernetes.io/name
+          operator: NotIn
+          values: ["eks-pod-identity-agent"]
 {{- end }}
     clientConfig:
       {{- if eq .Cluster.Provider "zalando-eks"}}