Exclude eks-pod-identity-agent from admission-controller to avoid 🐔🥚

Signed-off-by: Mikkel Oscar Lyderik Larsen <mikkel.larsen@zalando.de>
zalando-incubator · Nov 27, 2024 · b801743 · b801743
1 parent e710dd8
commit b801743
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/cluster/manifests/02-admission-control/teapot.yaml b/cluster/manifests/02-admission-control/teapot.yaml
@@ -17,6 +17,9 @@ webhooks:
         - key: k8s-app
           operator: NotIn
           values: ["kube-proxy"]
+        - key: app.kubernetes.io/name
+          operator: NotIn
+          values: ["eks-pod-identity-agent"]
 {{- end }}
     clientConfig:
       {{- if eq .Cluster.Provider "zalando-eks"}}
@@ -49,6 +52,9 @@ webhooks:
         - key: k8s-app
           operator: NotIn
           values: ["kube-proxy"]
+        - key: app.kubernetes.io/name
+          operator: NotIn
+          values: ["eks-pod-identity-agent"]
 {{- end }}
     clientConfig:
       {{- if eq .Cluster.Provider "zalando-eks"}}
@@ -341,6 +347,9 @@ webhooks:
         - key: k8s-app
           operator: NotIn
           values: ["kube-proxy"]
+        - key: app.kubernetes.io/name
+          operator: NotIn
+          values: ["eks-pod-identity-agent"]
 {{- end }}
     clientConfig:
       {{- if eq .Cluster.Provider "zalando-eks"}}