Merge pull request #13328 from olemarkus/bump-pod-identity-webhook

Use proper image and add health check

tests/integration/update_cluster/irsa/data/aws_s3_bucket_object_minimal.example.com-addons-bootstrap_content

@@ -53,7 +53,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.16
     manifest: eks-pod-identity-webhook.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 0ab6ce61d8c23a90bcd3f6af97fe3ffaaa4b7a98c0572a4bd29fc3160eb0ebda
+    manifestHash: 441d923fd8f8c63000b7e9ee520b461e558200f865092624c40d3055db6ab1bd
     name: eks-pod-identity-webhook.addons.k8s.io
     needsPKI: true
     selector:

tests/integration/update_cluster/irsa/data/aws_s3_bucket_object_minimal.example.com-addons-eks-pod-identity-webhook.addons.k8s.io-k8s-1.16_content

@@ -128,8 +128,18 @@ spec:
         - --logtostderr
         - --watch-config-map
         - --v=5
-        image: olemarkus/amazon-eks-pod-identity-webhook:kops-v1.23.0-beta.2
+        image: amazon/amazon-eks-pod-identity-webhook:v0.4.0
         name: pod-identity-webhook
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /healthz
+            port: 9999
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 5
+          successThreshold: 1
+          timeoutSeconds: 1
         volumeMounts:
         - mountPath: /etc/webhook/certs
           name: cert

upup/models/cloudup/resources/addons/eks-pod-identity-webhook.addons.k8s.io/k8s-1.16.yaml.template

@@ -80,7 +80,7 @@ spec:
       serviceAccountName: pod-identity-webhook
       containers:
       - name: pod-identity-webhook
-        image: olemarkus/amazon-eks-pod-identity-webhook:kops-v1.23.0-beta.2
+        image: amazon/amazon-eks-pod-identity-webhook:v0.4.0
         command:
         - /webhook
         - --in-cluster=false
@@ -91,6 +91,16 @@ spec:
         - --logtostderr
         - --watch-config-map
         - --v=5
+        readinessProbe:
+          httpGet:
+            path: /healthz
+            port: 9999
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 5
+          timeoutSeconds: 1
+          successThreshold: 1
+          failureThreshold: 3
         volumeMounts:
         - name: cert
           mountPath: "/etc/webhook/certs"