diff --git a/apps/aws-lb-controller/manifests/ClusterRole-aws-lb-controller-aws-load-balancer-controller-role.yml b/apps/aws-lb-controller/manifests/ClusterRole-aws-lb-controller-aws-load-balancer-controller-role.yml index 13c84402..f92e6284 100644 --- a/apps/aws-lb-controller/manifests/ClusterRole-aws-lb-controller-aws-load-balancer-controller-role.yml +++ b/apps/aws-lb-controller/manifests/ClusterRole-aws-lb-controller-aws-load-balancer-controller-role.yml @@ -15,6 +15,9 @@ rules: - apiGroups: ["elbv2.k8s.aws"] resources: [ingressclassparams] verbs: [get, list, watch] + - apiGroups: ["elbv2.k8s.aws"] + resources: [albtargetcontrolconfigs] + verbs: [get] - apiGroups: [""] resources: [events] verbs: [create, patch] diff --git a/apps/aws-lb-controller/manifests/Deployment-aws-lb-controller-aws-load-balancer-controller.yml b/apps/aws-lb-controller/manifests/Deployment-aws-lb-controller-aws-load-balancer-controller.yml index 4ea35fe4..1510ce3f 100644 --- a/apps/aws-lb-controller/manifests/Deployment-aws-lb-controller-aws-load-balancer-controller.yml +++ b/apps/aws-lb-controller/manifests/Deployment-aws-lb-controller-aws-load-balancer-controller.yml @@ -45,7 +45,7 @@ spec: allowPrivilegeEscalation: false readOnlyRootFilesystem: true runAsNonRoot: true - image: "public.ecr.aws/eks/aws-load-balancer-controller:v2.14.1" + image: "public.ecr.aws/eks/aws-load-balancer-controller:v2.17.1" imagePullPolicy: IfNotPresent volumeMounts: - mountPath: /tmp/k8s-webhook-server/serving-certs diff --git a/apps/aws-lb-controller/manifests/MutatingWebhookConfiguration-aws-load-balancer-webhook.yml b/apps/aws-lb-controller/manifests/MutatingWebhookConfiguration-aws-load-balancer-webhook.yml index c59f18d4..6e2d2cc4 100644 --- a/apps/aws-lb-controller/manifests/MutatingWebhookConfiguration-aws-load-balancer-webhook.yml +++ b/apps/aws-lb-controller/manifests/MutatingWebhookConfiguration-aws-load-balancer-webhook.yml @@ -41,6 +41,38 @@ webhooks: resources: - pods sideEffects: None + - clientConfig: + caBundle: REPLACED + service: + name: aws-load-balancer-webhook-service + namespace: aws-lb-controller + path: /mutate-v1-pod-server-id + failurePolicy: Fail + name: quicid.elbv2.k8s.aws + admissionReviewVersions: + - v1beta1 + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/quic-server-id-inject + operator: In + values: + - enabled + objectSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: NotIn + values: + - aws-load-balancer-controller + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None - clientConfig: caBundle: REPLACED service: @@ -67,6 +99,76 @@ webhooks: resources: - services sideEffects: None + - clientConfig: + caBundle: REPLACED + service: + name: aws-load-balancer-webhook-service + namespace: aws-lb-controller + path: /mutate-alb-target-control-namespace-v1-pod + failurePolicy: Fail + name: alb-target-control.namespace.elbv2.k8s.aws + admissionReviewVersions: + - v1beta1 + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/alb-target-control-agent-injection + operator: In + values: + - enabled + objectSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: NotIn + values: + - aws-load-balancer-controller + - key: elbv2.k8s.aws/alb-target-control-agent-inject + operator: NotIn + values: + - "false" + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None + - clientConfig: + caBundle: REPLACED + service: + name: aws-load-balancer-webhook-service + namespace: aws-lb-controller + path: /mutate-alb-target-control-object-v1-pod + failurePolicy: Fail + name: alb-target-control.object.elbv2.k8s.aws + admissionReviewVersions: + - v1beta1 + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/alb-target-control-agent-injection + operator: DoesNotExist + objectSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: NotIn + values: + - aws-load-balancer-controller + - key: elbv2.k8s.aws/alb-target-control-agent-inject + operator: In + values: + - "true" + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None - clientConfig: caBundle: REPLACED service: diff --git a/apps/aws-lb-controller/release.yaml b/apps/aws-lb-controller/release.yaml index b12ee19f..34dbcc4d 100644 --- a/apps/aws-lb-controller/release.yaml +++ b/apps/aws-lb-controller/release.yaml @@ -9,7 +9,7 @@ spec: chart: spec: chart: aws-load-balancer-controller - version: 1.14.1 + version: 1.17.1 sourceRef: kind: HelmRepository name: eks