Fix pdb for identity webhook

Also removing namespace from non-namespaced resource

tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content

@@ -47,7 +47,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.16
     manifest: eks-pod-identity-webhook.addons.k8s.io/k8s-1.16.yaml
-    manifestHash: 0bec2a812bd438f03cb28b18391b78453430e17c7123c4b87a165cb5a1a03a92
+    manifestHash: ca08e870a5c376a65d6b41ce9ddcf5a12db858e2971398f6a06ac3e7071bea49
     name: eks-pod-identity-webhook.addons.k8s.io
     needsPKI: true
     selector:

tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-eks-pod-identity-webhook.addons.k8s.io-k8s-1.16_content

@@ -205,7 +205,6 @@ metadata:
     app.kubernetes.io/managed-by: kops
     k8s-addon: eks-pod-identity-webhook.addons.k8s.io
   name: pod-identity-webhook
-  namespace: kube-system
 webhooks:
 - admissionReviewVersions:
   - v1beta1

upup/models/cloudup/resources/addons/eks-pod-identity-webhook.addons.k8s.io/k8s-1.16.yaml.template

@@ -150,7 +150,6 @@ apiVersion: admissionregistration.k8s.io/v1
 kind: MutatingWebhookConfiguration
 metadata:
   name: pod-identity-webhook
-  namespace: kube-system
   annotations:
     cert-manager.io/inject-ca-from: kube-system/pod-identity-webhook
 webhooks:
@@ -208,7 +207,11 @@ metadata:
 data:
   config: {{ PodIdentityWebhookConfigMapData }}
 ---
+{{ if IsKubernetesGTE "1.23" }}
+apiVersion: policy/v1
+{{ else }}
 apiVersion: policy/v1beta1
+{{ end }}
 kind: PodDisruptionBudget
 metadata:
   name: pod-identity-webhook