Releases: kubernetes-sigs/aws-load-balancer-controller
Releases · kubernetes-sigs/aws-load-balancer-controller
v2.3.0
v2.3.0 (requires Kubernetes 1.16+)
Documentation
Image: docker.io/amazon/aws-alb-ingress-controller:v2.3.0
Thanks to all our contributors! 😊
Action Required
- New IAM Permissions needed for IPv6 clusters: sample policy, sample policy for cn, sample policy for gov-cloud
- New RBAC permissions needed (included in latest yaml/helm chart)
- CRD/Webhook updates needed (included in latest yaml/helm chart)
- Included yaml manifests use cert-manager apiversion v1. You need to update cert-manager to v1.5.3 or later if you install via yaml manifests or enable cert-manager for helm chart
Additional Note
This release introduces optimized security group rules for ALB. The controller uses a shared security group across multiple ALBs in the cluster to allow access to your application pods. As a result, your existing ALBs get updated on controller upgrade. There is a possible time window during reconfiguration where your client traffic might get impacted. We recommend upgrading the controller during a maintenance window.
If you don't prefer the controller create an additional security group, you can either specify a backend security group via the --backend-security-group controller flag, or revert to the previous behavior by setting the controller flag --enable-backend-security-group to false. If you install the helm chart, you can set the desired configuration via enableBackendSecurityGroup and backendSecurityGroup values.
What's new
- Improved security groups handling
- ALB IPv6 target groups
- Helm v3 chart
- Support for Endpointslices
- Upgrade controller runtime, k8s dependencies
- Use
admission/v1 - Update to use golang v1.16.3
Enhancements
- IngressClassParams support for load balancer attributes
- Specify NLB attributes via annotation, support for NLB deletion protection
- Restrict subnet auto-discovery to new LB creation for ALB/NLB
- Discover subnets based on available IP addresses
- Filter target group and load balancers by VPC ID
- Handling of deletion protection configured via annotation
- Custom AWS endpoints configuration
- Port range restriction for SG rules
- Discover AWS region from environment configuration
- Documentation changes
Helm chart
- Helm v3 chart
- Use pdb/v1 if available
- Reuse existing TLS secrets
- cert-manager apiversion v1
- optional serviceAnnotations
- specifying TLS certs/key for webhook
Changelog since v2.2.4
- Add support for ALB IPv6 target groups (#2284, @kishorj)
- add utilities to help write e2e tests and a few basic e2e tests cases (#2294, @M00nF1sh)
- provide scoped down IAM permissions example (#2283, @kishorj)
- Refactor custom AWS endpoint resolver (#2270, @kishorj)
- fix sdk override script for linux platform (#2280, @kishorj)
- update ssl redirect documentation (#2274, @kishorj)
- Reject custom load balancer name longer than 32 characters (#2295, @kishorj)
- modify .Capabilities.APIVersions.Has for pdb (#2293, @cw-sakamoto)
- fix typo in service annotations (#2290, @neha-viswanathan)
- Update documentation site to show grpc example tutorial (#2277, @brianannis)
- doc: Update configuration notes for working with IMDSv2 metadata server (#2243, @alexku7)
- Enable Helm chart to reuse existing TLS secrets, use v3 charts (#2264, @oliviassss)
- Bump pdb apiVersion to v1 (#2192, @Evalle)
- Add parameter to create IngressClass Resource (#2248,@lazouz)
- Add code for acquiring AWS region from env (#2217, @Shreya027)
- Support optimized security group rules for ALB (#2205, @kishorj)
- cert-manager apiversion to v1 (#2189, @cw-sakamoto)
- Fix documentation edit link to correct repo (#2267, @Yasumoto)
- doc: Fix typo in aws-load-balancer-controller README (#2268, @bhops)
- Clarify helm installation when using IAM roles or not (#2265, @Yasumoto)
- Fix typo in service annotations guide (#2262, @jeremydonahue)
- Add port range restriction for SG (#2236, @oliviassss)
- Add custom AWS endpoints configuration (#2179, @papigers)
- Create optional serviceAnnotations value in helm chart (#2171, @jwenz723)
- Add "--region" parameter of eksctl CLI (#2227, @davidshtian)
- EndpointSlice support for IP target groups (#2169, @harivall)
- Fix typo in README.md (#2223, @PascalBourdier)
- Support specifying TLS certs/key for webhook in helm chart (#2198, @agaffney)
- Set maximum length for custom load-balancer-name (#2195, @bnutt)
- add load balancer attributes support for IngressClassParams (#2190, @oliviassss)
- use minimal base docker image (#2196, @M00nF1sh)
- update docs for deletion_protection (#2181, @oliviassss)
- update docs about multiple controller deployment (#2186, @M00nF1sh)
- Force delete lb when deletion_protection is disabled (#2172, @oliviassss)
- Add code for filtering target group & load balancers by VPC ID (#2157, @Shreya027)
- Fix the regression of IP mode support for fargate pods (#2158, @M00nF1sh)
- Improve contributing documentation (#2155, @akuzni2)
- Discovery subnets by available ip addresses (#2146, @oliviassss)
- Fix typo (#2153, @joedborg)
- alpn-policy: Don't require TLS target groups (#2147, @iAnomaly)
- add support for pods supported by IPv4Prefix on ENI (#2137, @M00nF1sh)
- Update repo name to load-balancer (#2140, @tyron)
- Add deployment update strategy to aws-load-balancer-controller (#2130, @kirrmann)
- Restrict subnet auto-discovery to new LB creation on service side (#2129, @oliviassss)
- Clean up extra spaces (#2121,@jayonlau)
- Clean up extra spaces (#2120,@jayonlau)
- Restrict subnet auto-discovery to new LB creation only (#2125, @oliviassss)
- Docs: Document Reconciliation Behaviour When Deletion Protection is Enabled. (#2119, @korenyoni)
- Add support for AWS SDK override ([#2114](https://github.com/kubernetes-sigs/aws-load-balancer-cont...
Contributors
Yasumoto, kirrmann, and 26 other contributors
Assets 3
v2.2.4
v2.2.4 (requires Kubernetes 1.16+)
Documentation
Image: docker.io/amazon/aws-alb-ingress-controller:v2.2.4
Thanks to all our contributors! 😊
Action Required
N/A
Additional Notes:
- We switch to use a minimal base docker image that only contains necessary dependencies and don't have shell binaries.(prior to this release, AmazonLinux2 was used as base docker image)
Changelog since v2.2.3
ECR images
- 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 558608220178.dkr.ecr.me-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 590381155156.dkr.ecr.eu-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.ap-northeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.ap-northeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.ap-northeast-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.ap-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.ap-southeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.ap-southeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.ca-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.eu-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.eu-north-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.eu-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.sa-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.us-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 800184023465.dkr.ecr.ap-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 877085696533.dkr.ecr.af-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.4
- 918309763551.dkr.ecr.cn-north-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.2.4
- 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.2.4
Contributors
M00nF1sh
Assets 2
v2.2.3
v2.2.3 (requires Kubernetes 1.16+)
Documentation
Image: docker.io/amazon/aws-alb-ingress-controller:v2.2.3
Thanks to all our contributors! 😊
Action Required
N/A
Additional Notes:
- This release is cut from our release-branch
release-2.2instead ofmain, which is based onv2.2.2with a cherry-pick commit.
Changelog since v2.2.2
ECR images
- 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 558608220178.dkr.ecr.me-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 590381155156.dkr.ecr.eu-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.ap-northeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.ap-northeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.ap-northeast-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.ap-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.ap-southeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.ap-southeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.ca-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.eu-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.eu-north-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.eu-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.sa-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.us-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 800184023465.dkr.ecr.ap-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 877085696533.dkr.ecr.af-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.3
- 918309763551.dkr.ecr.cn-north-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.2.3
- 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.2.3
Contributors
M00nF1sh
Assets 2
v2.2.2
v2.2.2 (requires Kubernetes 1.16+)
Documentation
Image: docker.io/amazon/aws-alb-ingress-controller:v2.2.2
Thanks to all our contributors! 😊
Action Required
- 🚨 This version doesn't work for Fargate pods with IP mode, use v2.2.3 instead
What's new
- "ip" TargetType now supports pods by ENI's IP address prefixes with VPC CNI plugin v1.9.0+. See here for more details
Additional Notes:
- This release is cut from our release-branch
release-2.2instead ofmain, which is based onv2.2.1with a cherry-pick commit.
Changelog since v2.2.1
ECR images
- 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 558608220178.dkr.ecr.me-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 590381155156.dkr.ecr.eu-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.ap-northeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.ap-northeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.ap-northeast-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.ap-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.ap-southeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.ap-southeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.ca-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.eu-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.eu-north-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.eu-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.sa-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.us-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 800184023465.dkr.ecr.ap-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 877085696533.dkr.ecr.af-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.2
- 918309763551.dkr.ecr.cn-north-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.2.2
- 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.2.2
Contributors
M00nF1sh
Assets 2
v2.2.1
v2.2.1 (requires Kubernetes 1.16+)
Documentation
Image: docker.io/amazon/aws-alb-ingress-controller:v2.2.1
Thanks to all our contributors! 😊
Action Required
N/A
What's new
- New controller-level flag
targetgroupbinding-max-exponential-backoff-delayforMaximum duration of exponential backoff for targetGroupBinding reconcile failures
Changelog since v2.2.0
- Improvement - Enforce one target group per target group binding (#2098, @fawadkhaliq)
- Improvement - Add max backoff flag for TargetGroupBinding reconciler (#2029, @eytan-avisror)
- Improvement - New error generation/message when ServiceType is "ClusterIP" and LoadBalancerTargetType is "instance" (#2094, @harivall)
- Improvement - Add MinLength validation to TargetGroupARN (#2035, @shuheiktgw)
- Documentation - Add controller development docs (#2101, @fawadkhaliq)
- Documentation - Fix annotation code block for load balancer name (#2096, @Pred05)
- Documentation - Update example for latest api version (#2072, @tlliddle)
- Documentation - Fix typo in installation instructions (#2063, @tomahawk-pilot)
- Documentation - cosmetic changes to the NLB documentation (#2010, @kishorj)
- Testing - fix ineffectual assignment to err (#2016, @zhouhao3)
- Testing - Don't consider nodes with exclude-from-external-load-balancer eligible worker nodes in e2e (#2012, @olemarkus)
- Development - cut v2.2.1 release (#2105, @M00nF1sh)
- Development - Add lint and dry run checks for the Helm chart (#2099, @fawadkhaliq)
- Development - Added issue and pull request templates (#2089, @fawadkhaliq)
- Development - Add aws-load-balancer-controller Helm chart (#2088, @fawadkhaliq)
- Development - fix docs theme with latest mkdocs-material & pin docs dev environment (#2023, @M00nF1sh)
ECR images
- 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 558608220178.dkr.ecr.me-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 590381155156.dkr.ecr.eu-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.ap-northeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.ap-northeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.ap-northeast-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.ap-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.ap-southeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.ap-southeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.ca-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.eu-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.eu-north-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.eu-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.sa-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.us-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 800184023465.dkr.ecr.ap-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 877085696533.dkr.ecr.af-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.2.1
- 918309763551.dkr.ecr.cn-north-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.2.1
- 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.2.1
Contributors
olemarkus, fawadkhaliq, and 9 other contributors
Assets 2
v2.2.0
v2.2.0 (requires Kubernetes 1.16+)
Documentation
Image: docker.io/amazon/aws-alb-ingress-controller:v2.2.0
Thanks to all our contributors! 😊
Action Required
- New IAM Permissions needed: sample policy, sample policy for cn, sample policy for gov-cloud
- New RBAC permissions needed (included in latest yaml/helm chart)
- CRD/Webhook updates needed (included in latest yaml/helm chart)
- breaking change: NLB will be provisioned as internal by default. Annotation
service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facingneed to be explicitly specified on the service to provision an internet-facing NLB. (existing NLBs managed by this controller are not affected). - breaking change: Ingresses rules referencing non-existing Service/Action will be replaced by fixed 503 responses instead of preventing Ingress from reconcile.
- breaking change: Tags specified via
--default-tagscontroller flag will takes highest priority.
What's new
- NLB Instance mode
service.beta.kubernetes.io/aws-load-balancer-private-ipv4-addressesannotation to configure private static IPs for an internal NLB- IngressClassParams CRD to restrict LoadBalancer settings across multiple Ingresses
alb.ingress.kubernetes.io/ssl-redirectannotation to simplify HTTP-To-HTTPS redirect configuration- Ingress PathType
- Resource Tagging for Listener and ListenerRules
- Ability to specify custom load balancer name for ALB/NLB
- Ability to select backend nodes by labels for Ingress/Service/TargetGroupBinding
- Ability to provision ALB on LocalZone
- Ability to opt-out management for certain tags via controller flags
- Ability to customize webhook's certificate locations via controller flags
- Ability to specify default SSL policy via controller flags
Enhancements
- Better handling for Ingress rules referencing non-existing Service.
- Use objectSelector for pod mutator webhook
- Upgraded to v1 API for webhook and CRD
Bug Fixes
- Fixed the default certificate selection for ALB/Ingress(#1836)
- Fixed issues around legacy readinessGate removal(#1782 )
Changelog since v2.1.3
- resolve VPC CIDRs for UDP protocol (#2008, @kishorj)
- Doc updates for NLB instance mode support (#2007, @kishorj)
- add event handler for ingressClass&ingressClassParams events (#1991, @M00nF1sh)
- filter redundant health check SG rules (#2006, @kishorj)
- allow invalid ingressClass for update events without ingressClass change. (#2005, @M00nF1sh)
- Docs update about IngressClass & new controller-level flags (#2002, @M00nF1sh)
- remove deprecated apiVersion (#1850, @ngoyal16)
- Add unit tests for VPC resolver (#2004, @kishorj)
- Update Installation manifests (CRD/Webhook/Controller) (#2000, @M00nF1sh)
- update site_name (#1982, @mikutas)
- Add flags to set server key and certificate (#1983, @lxlxok)
- Add docs around how does the AWS LB controller work with legacy cloud provider (#1988, @kolorful)
- Limit HealthCheckNodePort to service type LoadBalancer (#1980, @kishorj)
- doc update for non-EKS installs (#1979, @kishorj)
- add support for tags in ingressClassParams (#1976, @M00nF1sh)
- add rbac to read IngressClassParams (#1977, @M00nF1sh)
- add support for external-managed-tags & prefer defaultTags (#1970, @M00nF1sh)
- tolerate misconfiguration that references non-exists service or action (#1967, @M00nF1sh)
- Sort targetGroup Attrs (#1971, @kishorj)
- enforce LB attributes according to IngressClassParams (#1969, @M00nF1sh)
- Provision internal NLB by default (#1964, @kishorj)
- Use objectSelector for pod mutator webhook (#1958, @kishorj)
- docs: update Subnet discovery with optional tag (#1943, @kreempuff)
- Fix new tagging ARNs in aws-cn IAM policy (#1944, @rifelpet)
- Resource tagging for Listener and Rules (#1887, @kishorj)
- Fixed an issue where mergedTLSCerts would be sorted. (#1863, @yutachaos)
- fix flaky throttle test (#1923, @M00nF1sh)
- adjust mocks generation (#1922, @M00nF1sh)
- add support for local zone (#1920, @M00nF1sh)
- Support custom ALB name via annotation (#1899, @kishorj)
- gRPC docs (#1901, @brianannis)
- add support for IngressClassParams's group settings (#1913, @M00nF1sh)
- Additional e2e tests for service (#1898, @kishorj)
- Highlight the need to tag subnets (#1904, @isqrd)
- Adding a note about the preservation of ALB (#1919, @nataizya-s)
- Add IAM policy for US GovCloud (#1912, @1riggs)
- add validating webhook for ingress_class_params (#1902, @M00nF1sh)
- Update installation instructions (#1896, @kishorj)
- Update nlb target type annotation (#1894, @kishorj)
- improve missing service handling for targetGroupBinding (#1888, @M00nF1sh)
- Updating the default resource tag documentation to reference the correct tag name (#1889, @georgew5656)
- Support target node labels for ingress (#1874, @kishorj)
- Add e2e tests for NLB instance mode (#1860, @kishorj)
- set default log level to info (#1877, @kishorj)
- Add a flag to set the default SSL Policy (#1881, @laurovenancio)
- Add support for specifying the load balancer's name via annotation (#1880, @rifelpet)
- Fixed race condition test (#1866, @yutachaos)
- Doc update for attribute reset (#1869, @mikhailadvani)
- IngressClassParams support (#1849, @M00nF1sh)
- Add support for NLB instance mode (#1832, @kishorj)
- Change check for remove regacy readiness gate (#1844, @cw-sakamoto)
- add support for ssl-redirect annotation (#1837, @M00nF1sh)
- Add support for NodeSelector in Targ...
Contributors
isqrd, rifelpet, and 16 other contributors
Assets 2
v2.1.3
v2.1.3 (requires Kubernetes 1.15+)
Documentation
Image: docker.io/amazon/aws-alb-ingress-controller:v2.1.3
Action Required
- N/A
What's new
- Fix #1830, controller will now add the LB subnet CIDRs to the security group rules when preserve client IP is configured
Changelog since v2.1.1
- Add health check SG rule from VPC if preserve client IP is configured (#1831, @kishorj)
- docs: Update v1 to v2 migration guide to include example command for updating SG rules (#1801, @chancez)
- docs: update for NLB-IP prereq (#1818, @kishorj)
- docs: state supported target-type more clearly in pod readiness gate documentation (#1815, @itskingori)
ECR images
- 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 558608220178.dkr.ecr.me-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 590381155156.dkr.ecr.eu-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.ap-northeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.ap-northeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.ap-northeast-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.ap-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.ap-southeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.ap-southeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.ca-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.eu-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.eu-north-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.eu-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.sa-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.us-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 800184023465.dkr.ecr.ap-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 877085696533.dkr.ecr.af-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.3
- 918309763551.dkr.ecr.cn-north-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.1.3
- 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.1.3
v2.1.2
v2.1.2 (requires Kubernetes 1.15+)
Documentation
Image: docker.io/amazon/aws-alb-ingress-controller:v2.1.2
Action Required
- N/A
What's new
- Relax cluster tag requirement on subnets during auto-discovery
Changelog since v2.1.1
- Relax cluster tag requirement on subnets during auto-discovery (#1773, @kishorj)
- fix typo in nlb ip docs (#1770, @avielb)
- docs: Add EKS for fargate configure info (#1805, @komisan19)
- add IAM permission that needed by when using with outpost+coIP pool (#1803, @M00nF1sh)
- fix test script by reorder go get command (#1802, @M00nF1sh)
- add mod=readonly (#1800, @M00nF1sh)
- docs: update helm install command (#1793, @hi-rustin)
- docs: update iam service account creation command (#1795, @weiwarren)
- Update documentation for preserve client IP attribute (#1798, @kishorj)
- enable e2e tests for service (#1726, @kishorj)
ECR images
- 558608220178.dkr.ecr.me-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 590381155156.dkr.ecr.eu-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.ap-northeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.ap-northeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.ap-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.ap-southeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.ap-southeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.ca-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.eu-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.eu-north-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.eu-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.sa-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.us-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 800184023465.dkr.ecr.ap-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 877085696533.dkr.ecr.af-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.2
- 918309763551.dkr.ecr.cn-north-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.1.2
- 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.1.2
v2.1.1
v2.1.1 patch release
Documentation
Image: docker.io/amazon/aws-alb-ingress-controller:v2.1.1
Action Required
- N/A
What's new
- Built with latest AmazonLinux base image to address vulnerabilities in outdated base image.
- Multiple minor bug fixes(see Changelog)
Changelog since v2.1.0
- Handling Cluster AutoScaler Taint to determine the healthiness of node (#1688, @atulaggarwal)
- ignore target group health check timeout for NLB (#1727, @kishorj)
- sort subnets by id (#1750, @M00nF1sh)
- fix typo in docs/deploy/installation.md (#1730, @MiniJerome)
- Update service annotation doc (#1746, @kishorj)
- Fix annotation documentation about ALB attributes (#1722, @giannisbetas)
- Fix list in how-it-works doc (#1716, @calvinbui)
- doc: fix wrong itemization format (#1710, @shibataka000)
- promote install instructions to top level menu item, enable mkdocs gh action (#1681, @geoffcline)
ECR images
- 558608220178.dkr.ecr.me-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 590381155156.dkr.ecr.eu-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.ap-northeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.ap-northeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.ap-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.ap-southeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.ap-southeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.ca-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.eu-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.eu-north-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.eu-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.sa-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.us-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 800184023465.dkr.ecr.ap-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 877085696533.dkr.ecr.af-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.1
- 918309763551.dkr.ecr.cn-north-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.1.1
- 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.1.1
v2.1.0
Our first minor release for AWS Load Balancer Controller ❤️
Documentation
Image: docker.io/amazon/aws-alb-ingress-controller:v2.1.0
Action Required
- New RBAC permission to read IngressClass are needed if IngressClass is used. (The helm chart and YAMLs contains updated RBAC role)
What's new
- Supports IngressClass introduced in Kubernetes 1.18
- Supports gRPC workloads with end to end HTTP/2 for ALB
- Supports to configure customer owned IP pool for ALB on Outpost
- Supports IPv6 for NLB
- Supports to configure ALPNPolicy for NLB
- Supports to configure TargetGroup attributes for NLB
- Supports to configure subnets for NLB
- Supports to configure default AWS tags for all AWS resources managed by this controller
Changelog since v2.0.1
- Fix the default healthCheck setting for GRPC (#1698, @M00nF1sh)
- cut v2.1.0 release (#1697, @M00nF1sh)
- add support for default-tags (#1696, @M00nF1sh)
- typo fix: alb.ingress.kubernetes.io/conditions.${conditions-name} (#1691, @opklnm102)
- update service.beta.kubernetes.io/aws-load-balancer-healthcheck-port doc (#1689, @M00nF1sh)
- add COIP support for ALB on outpost (#1685, @M00nF1sh)
- doc: workaround fix for deploying external-dns (#1290, @zxkane)
- Support for IPv6 and NLB (#1677, @csnitker)
- docs: make external-dns example to 0.7.2+ working in AWS China (#1680, @zxkane)
- Adding
endpointsresource permission (#1580, @tsahiduek) - add service event handler for targetGroupBinding (#1678, @M00nF1sh)
- Update installation guide to refer v2.0.1 (#1675, @kishorj)
- ignore incorrectly configured Ingresses when building IngressGroup (#1676, @M00nF1sh)
- Allow stringMap annotation values containing equal sign (#1674, @kishorj)
- add ingress class support (#1670, @M00nF1sh)
- Add support for NLB ALPN policy (#1669, @kishorj)
- Fix documentation: using numerical target ports in services doesn't cause downtime (#1658, @devkid)
- Fix health check for gRPC (#1663, @backjo)
- Add basic GitHub Action for running unit tests + code coverage (#1666, @backjo)
- Ability to specify subnets for NLB (#1667, @kishorj)
- Add support for specifying NLB target group attributes (#1632, @kishorj)
- Update cert_discovery.md (#1657, @calvinbui)
- feat: add support to set ProtocolVersion based on annotation values (#1589, @backjo)
ECR images
- 558608220178.dkr.ecr.me-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 590381155156.dkr.ecr.eu-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.ap-northeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.ap-northeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.ap-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.ap-southeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.ap-southeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.ca-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.eu-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.eu-north-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.eu-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.sa-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.us-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 800184023465.dkr.ecr.ap-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 877085696533.dkr.ecr.af-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.1.0
- 918309763551.dkr.ecr.cn-north-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.1.0
- 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.1.0