add cert-manager annotation to pod-identity-webhook mutatingwebhookco…

…nfiguration

pkg/cloud/services/iam/podidentitywebhook.go

@@ -3,6 +3,7 @@ package iam
 import (
 	"context"
 	"errors"
+	"fmt"
 
 	v14 "k8s.io/api/admissionregistration/v1"
 	v13 "k8s.io/api/apps/v1"
@@ -17,6 +18,8 @@ import (
 )
 
 const (
+	certManagerInjectCAAnnotation = "cert-manager.io/inject-ca-from"
+
 	podIdentityWebhookName  = "pod-identity-webhook"
 	podIdentityWebhookImage = "amazon/amazon-eks-pod-identity-webhook:v0.5.2"
 
@@ -332,6 +335,9 @@ func reconcileMutatingWebHook(ctx context.Context, ns string, secret *corev1.Sec
 	}
 
 	mwhMeta := objectMeta(podIdentityWebhookName, ns)
+	mwhMeta.Annotations = map[string]string{
+		certManagerInjectCAAnnotation: fmt.Sprintf("%s/%s", ns, secret.Name),
+	}
 	fail := v14.Ignore
 	none := v14.SideEffectClassNone
 	mutate := "/mutate"