aws/aws-application-networking-k8s v2.1.4 on GitHub

Highlights

Configurable idle timeout: HTTPRoute, GRPCRoute, and TLSRoute support a new application-networking.k8s.aws/idle-timeout-seconds annotation. It sets the idle connection timeout on the route's VPC Lattice service. See the HTTPRoute docs for details. (#1003)
Fewer VPC Lattice API calls: the controller now skips RegisterTargets, PutAuthPolicy, UpdateAccessLogSubscription, and UpdateService when the live state already matches. This helps avoid throttling. (#957, #1002, #1003)

An IAMAuthPolicy whose target VPC Lattice resource was deleted now reports Accepted=False instead of True. (#957)
IAMAuthPolicy is now applied only to VPC Lattice resources this controller manages. Other resources are rejected with Accepted=False, reason Conflicted. (#1001)

fix: address pre-existing drift-detection issues amplified by periodic reconciliation by @pscheri in #957
feat: support idleTimeoutSeconds for Lattice services via route annotation by @liucalvin in #1003
fix: reduce redundant VPC Lattice API calls by @liucalvin in #1002
fix: enforce VPC Lattice resource ownership before writing IAM auth policy by @liucalvin in #1001
Add controller version to AWS SDK User-Agent by @liucalvin in #1008
chore(deps): bump certifi from 2024.7.4 to 2026.10.19 by @dependabot[bot] in #1006

Full Changelog: v2.1.3...v2.1.4