aws / aws/amazon-eks-pod-identity-webhook

The admissionregistration.k8s.io/v1beta1 API version of MutatingWebhookConfiguration is no longer served as of v1.22.

Open
#205 6 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
691
Forks
202
Avg merge
4h 38m
Merged PRs (30d)
1

Description

Current EKS version:1.21
Purpose: Upgrade version to 1.22
EKS upgrade insights shows that there are deprecated api versions:
![image](https://github.com/aws/amazon-eks-pod-identity-webhook/assets/109124236/27114e9c-f429-4172-ad05-b3c978bf666c)

Check cluster:
`kubectl get mutatingwebhookconfigurations.admissionregistration.k8s.io -A`
![image](https://github.com/aws/amazon-eks-pod-identity-webhook/assets/109124236/dedf2d51-38d8-4450-ab71-9e59d5288de2)

Check details:
`kubectl get MutatingWebhookConfiguration.v1beta1.admissionregistration.k8s.io "0500-amazon-eks-fargate-mutation.amazonaws.com" -o yaml | grep apiVersion`
`kubectl get MutatingWebhookConfiguration.v1.admissionregistration.k8s.io "0500-amazon-eks-fargate-mutation.amazonaws.com" -o yaml | grep apiVersion`

The difference between the two: **v1beta1 & v1**
![image](https://github.com/aws/amazon-eks-pod-identity-webhook/assets/109124236/cf71a166-2b42-4440-b206-0b859fd4770d)
![image](https://github.com/aws/amazon-eks-pod-identity-webhook/assets/109124236/07db0d25-5454-4341-b3f7-605fd528ada1)

Question:
1、In the second picture, why does the first row show v1, but the second column shows v1beta1?
2、If I upgrade to v1.22, will v1beta1 in the first picture be automatically updated to v1? In the same way, will the second row in the second picture also be updated?

For "pod-identity-webhook", the phenomenon is the same as above.
`kubectl get MutatingWebhookConfiguration.v1beta1.admissionregistration.k8s.io "pod-identity-webhook" -o yaml | grep apiVersion`
`kubectl get MutatingWebhookConfiguration.v1.admissionregistration.k8s.io "pod-identity-webhook" -o yaml | grep apiVersion`
![image](https://github.com/aws/amazon-eks-pod-identity-webhook/assets/109124236/29139240-b70d-4c30-beab-2b6e67bf8903)
![image](https://github.com/aws/amazon-eks-pod-identity-webhook/assets/109124236/a945e67b-d137-4eb0-88e9-91b7102ace73)

Guys, is there anything I need to do before upgrading?

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the reported kubectl queries for MutatingWebhookConfiguration objects and the admissionregistration.k8s.io/v1beta1 and v1 API versions. Reproduce the checks against the relevant EKS versions, then document the observed version differences, upgrade impact, and any required action for pod-identity-webhook and the Fargate mutation configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
api, infrastructure
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.