Bug Fixes:
- Fixed a bug where the IAMPolicy and IAMPartialPolicy controllers would alphabetize the members field within the resource spec and write it back. This behavior can conflict with intent-based reconciliation from GitOps systems such as Config Sync, causing a loop of updates and potentially exhausting IAM read quotas. This issue affected versions 1.138.0 and has now been patched in version 1.138.1.
Note on CRD Versions:
- Please be aware that while this patch release is version 1.138.1, the included Custom Resource Definitions (CRDs) are version 1.138.0. This is a known issue. However, since the changes in this patch are limited to the controller's logic and do not alter the CRD schemas, this version mismatch is not expected to cause any functional issues. KCC is designed to be backward compatible with previous patch versions of CRDs.