pod-identity-webhook, 1.22 migration, removed api admissionregistration.k8s.io/v1beta1

Question

I have 3 eks clusters, and on all of them the:
MutatingWebhookConfiguration  pod-identity-webhook 
is created with apiversion: admissionregistration.k8s.io/v1beta1 
which will be removed in 1.22
Is it my responsability to re-create the whole pod-identity setup with something supported in 1.22+, or will the upgrade managed this and the admission webhook will still be running on the managed api servers ?

jimmyray · Answer

Even though you can see the Pod Identity Webhook `mutatingwebhookconfigurations` resource in the EKS cluster, you should also notice that the pods are not running on your nodes. In an EKS cluster, the Pod Identity Webhook pods run on the managed control plane. So, yes, when the cluster is upgraded, the new api versions will be set for you.

pod-identity-webhook, 1.22 migration, removed api admissionregistration.k8s.io/v1beta1

Relevanter Inhalt