Update Helm release aws-load-balancer-controller to v1.17.1

apps/aws-lb-controller/manifests/ClusterRole-aws-lb-controller-aws-load-balancer-controller-role.yml

@@ -15,6 +15,9 @@ rules:
   - apiGroups: ["elbv2.k8s.aws"]
     resources: [ingressclassparams]
     verbs: [get, list, watch]
+  - apiGroups: ["elbv2.k8s.aws"]
+    resources: [albtargetcontrolconfigs]
+    verbs: [get]
   - apiGroups: [""]
     resources: [events]
     verbs: [create, patch]

apps/aws-lb-controller/manifests/Deployment-aws-lb-controller-aws-load-balancer-controller.yml

@@ -45,7 +45,7 @@ spec:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
             runAsNonRoot: true
-          image: "public.ecr.aws/eks/aws-load-balancer-controller:v2.14.1"
+          image: "public.ecr.aws/eks/aws-load-balancer-controller:v2.17.1"
           imagePullPolicy: IfNotPresent
           volumeMounts:
             - mountPath: /tmp/k8s-webhook-server/serving-certs

apps/aws-lb-controller/manifests/MutatingWebhookConfiguration-aws-load-balancer-webhook.yml

@@ -41,6 +41,38 @@ webhooks:
         resources:
           - pods
     sideEffects: None
+  - clientConfig:
+      caBundle: REPLACED
+      service:
+        name: aws-load-balancer-webhook-service
+        namespace: aws-lb-controller
+        path: /mutate-v1-pod-server-id
+    failurePolicy: Fail
+    name: quicid.elbv2.k8s.aws
+    admissionReviewVersions:
+      - v1beta1
+    namespaceSelector:
+      matchExpressions:
+        - key: elbv2.k8s.aws/quic-server-id-inject
+          operator: In
+          values:
+            - enabled
+    objectSelector:
+      matchExpressions:
+        - key: app.kubernetes.io/name
+          operator: NotIn
+          values:
+            - aws-load-balancer-controller
+    rules:
+      - apiGroups:
+          - ""
+        apiVersions:
+          - v1
+        operations:
+          - CREATE
+        resources:
+          - pods
+    sideEffects: None
   - clientConfig:
       caBundle: REPLACED
       service:
@@ -67,6 +99,76 @@ webhooks:
         resources:
           - services
     sideEffects: None
+  - clientConfig:
+      caBundle: REPLACED
+      service:
+        name: aws-load-balancer-webhook-service
+        namespace: aws-lb-controller
+        path: /mutate-alb-target-control-namespace-v1-pod
+    failurePolicy: Fail
+    name: alb-target-control.namespace.elbv2.k8s.aws
+    admissionReviewVersions:
+      - v1beta1
+    namespaceSelector:
+      matchExpressions:
+        - key: elbv2.k8s.aws/alb-target-control-agent-injection
+          operator: In
+          values:
+            - enabled
+    objectSelector:
+      matchExpressions:
+        - key: app.kubernetes.io/name
+          operator: NotIn
+          values:
+            - aws-load-balancer-controller
+        - key: elbv2.k8s.aws/alb-target-control-agent-inject
+          operator: NotIn
+          values:
+            - "false"
+    rules:
+      - apiGroups:
+          - ""
+        apiVersions:
+          - v1
+        operations:
+          - CREATE
+        resources:
+          - pods
+    sideEffects: None
+  - clientConfig:
+      caBundle: REPLACED
+      service:
+        name: aws-load-balancer-webhook-service
+        namespace: aws-lb-controller
+        path: /mutate-alb-target-control-object-v1-pod
+    failurePolicy: Fail
+    name: alb-target-control.object.elbv2.k8s.aws
+    admissionReviewVersions:
+      - v1beta1
+    namespaceSelector:
+      matchExpressions:
+        - key: elbv2.k8s.aws/alb-target-control-agent-injection
+          operator: DoesNotExist
+    objectSelector:
+      matchExpressions:
+        - key: app.kubernetes.io/name
+          operator: NotIn
+          values:
+            - aws-load-balancer-controller
+        - key: elbv2.k8s.aws/alb-target-control-agent-inject
+          operator: In
+          values:
+            - "true"
+    rules:
+      - apiGroups:
+          - ""
+        apiVersions:
+          - v1
+        operations:
+          - CREATE
+        resources:
+          - pods
+    sideEffects: None
   - clientConfig:
       caBundle: REPLACED
       service:

apps/aws-lb-controller/release.yaml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: aws-load-balancer-controller
-      version: 1.14.1
+      version: 1.17.1
       sourceRef:
         kind: HelmRepository
         name: eks