kubernetes-sigs/aws-load-balancer-controller v2.4.0

on GitHub

v2.4.0 (requires Kubernetes 1.19+)

Documentation

Image: docker.io/amazon/aws-alb-ingress-controller:v2.4.0

Thanks to all our contributors! 😊

Note

This release uses the new Ingress API version networking.k8s.io/v1 available in kubernetes 1.19 and later releases. As a result, the v2.4.0 and later releases of the aws-load-balancer-controller will not support kubernetes 1.18 and older versions. If you are running the older k8s version, you can either upgrade your cluster or use the v2.3.x version of the controller.

IMPORTANT If you are upgrading the controller from a prior version to v2.4.0, please apply the entire manifest or use helm due to the webhook changes.

For convenience, the v2.4.0 release manifest and the helm chart creates an IngressClass resource named alb by default.

What's new

1. Support for Ingress API version networking.k8s.io/v1
2. Support for service spec.loadBalancerClass
3. Option to disable security group rules management for NLB
4. Merge tags between kubernetes ingress and services
5. Helm chart create IngressClass and IngressClassParams by default
6. Add servicemonitor to helm chart
7. Helm chart keepTLSSecret is true by default
8. Provide a new feature gate ServiceTypeLoadBalancerOnly which can optionally limit the controller to service of type LoadBalancer

Bug fixes

1. Fix potentially slow resource reconciliation by caching AWS shield subscription state to mitigate API throttling issues
2. Add default tags to the backend Security Group
3. Ignore invalid ARN error while deleting TargetGroupBinding
4. Documentation fixes

Changelog since v2.3.1

• doc updates for v2.4.0 (#2506, @kishorj)
• change IngressClassParams default name to alb (#2508, @kishorj)
• Helm chart for v2.4.0 release (#2503, @kishorj)
• Upgrade aws-sdk-go to 1.42.27 (#2500, @johngmyers)
• Add an option to disable SG rules management for NLB (#2481, @kishorj)
• make keepTLSSecret true by default (#2483, @kishorj)
• add support for loadBalancerClass (#2489, @kishorj)
• add documentation for manage-backend-security-group-rules (#2486, @kishorj)
• fix typo in annotations doc (#2482, @kishorj)
• Adding support of ingressClassParams in helm charts (#2478, @haouc)
• Merge tags from alb.ingress.kubernetes.io/tags (#2480, @oliviassss)
• feat(chart): add servicemonitor (#2335, @stevehipwell)
• Fetch aws-load-balancer-controller logs before deleting (#2436, @cgchinmay)
• check invalid TG ARN when deleting TGB(#2454, @oliviassss )
• Upgrade echoserver to 2.5 (#2452, @johngmyers)
• Format AWS policy JSON document for consistency (#2447, @orsenthil)
• Add default tags to backend SG (#2425, @kishorj)
• helm: Remove unnecessary admissionregistration.k8s.io/v1beta1 (#2443, @johngmyers)
• helm: Create IngressClass by default (#2442, @johngmyers)
• Add a separate example for dualstack ALB (#2445, @kishorj)
• Update Ingress APIVersion to networking.k8s.io/v1 (#2433, @johngmyers)
• e2e: Use Helm chart from the commit (#2435, @johngmyers)
• updated Ingress API version in Documentation example (#2429, @NIKU-SINGH)
• e2e test helper script (#2246, @cgchinmay)
• Add workflow to auto sync helm chart to eks-charts (#2418, @oliviassss)
• Typo (#2416, @stensonb)
• Enable setting custom objectSelector for webhook (#2407, @Shreya027)
• cache AWS shield subscription state for 2 hour (#2408, @M00nF1sh)

ECR images

• 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 558608220178.dkr.ecr.me-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 590381155156.dkr.ecr.eu-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.ap-northeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.ap-northeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.ap-northeast-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.ap-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.ap-southeast-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.ap-southeast-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.ca-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.eu-central-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.eu-north-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.eu-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.eu-west-3.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.sa-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.us-west-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 602401143452.dkr.ecr.us-west-2.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 800184023465.dkr.ecr.ap-east-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 877085696533.dkr.ecr.af-south-1.amazonaws.com/amazon/aws-load-balancer-controller:v2.4.0
• 918309763551.dkr.ecr.cn-north-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.4.0
• 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-load-balancer-controller:v2.4.0