Merge pull request #8141 from zalando-incubator/dev-to-kube-1.31

dev to kube-1.31

Author: mikkeloscar

cluster/manifests/01-admission-control/config.yaml

@@ -27,7 +27,7 @@ data:
   pod.service-account-iam.enable: "true"
   pod.service-account-iam.base-aws-account-id: "{{ accountID .Cluster.InfrastructureAccount }}"
 {{- if eq .Cluster.ConfigItems.teapot_admission_controller_inject_aws_waiter "true" }}
-  pod.aws-waiter.image: "926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/automata/aws-credentials-waiter:master-226"
+  pod.aws-waiter.image: "926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/automata/aws-credentials-waiter:master-234"
 {{- end }}
   pod.env-inject.enable: "{{ .Cluster.ConfigItems.teapot_admission_controller_inject_environment_variables }}"
   pod.env-inject.variable._PLATFORM_ACCOUNT: "{{ .Cluster.Alias }}"

cluster/manifests/roles/poweruser-role.yaml

@@ -43,6 +43,12 @@ rules:
   - deletecollection
   - patch
   - update
+- apiGroups:
+  - ''
+  resources:
+  - pods/ephemeralcontainers
+  verbs:
+  - patch
 - apiGroups:
   - ''
   resources: