Update to ACK runtime v0.57.0, code-generator v0.57.0 (#62)

ack-bot · web-flow · commit 3aefe820fd87 · 2026-01-07T23:08:33.000Z
### Update to ACK runtime `v0.57.0`, code-generator `v0.57.0` ---------- * ACK code-generator `v0.57.0` [release notes](https://github.com/aws-controllers-k8s/code-generator/releases/tag/v0.57.0) * ACK runtime `v0.57.0` [release notes](https://github.com/aws-controllers-k8s/runtime/releases/tag/v0.57.0) ---------- NOTE: This PR increments the release version of service controller from `v1.2.0` to `v1.2.1` Once this PR is merged, release `v1.2.1` will be automatically created for `ssm-controller` **Please close this PR, if you do not want the new patch release for `ssm-controller`** ---------- #### stdout for `make build-controller`: ``` building ack-generate ... ok. ==== building ssm-controller ==== Copying common custom resource definitions into ssm Building Kubernetes API objects for ssm Generating deepcopy code for ssm Generating custom resource definitions for ssm Building service controller for ssm Running GO mod tidy Generating RBAC manifests for ssm Running gofmt against generated code for ssm Updating additional GitHub repository maintenance files ==== building ssm-controller release artifacts ==== Building release artifacts for ssm-v1.2.1 Generating common custom resource definitions Generating custom resource definitions for ssm Generating RBAC manifests for ssm ``` ---------- By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
@@ -5,9 +5,9 @@ aliases:
     - a-hilaly
     - jlbutler
     - michaelhtm
-    - rushmash91
     - knottnt
   # emeritus-core-ack-team:
+  #   - rushmash91
   #   - TiberiuGC
   #   - jaypipes
   #   - jljaco
diff --git a/apis/v1alpha1/ack-generate-metadata.yaml b/apis/v1alpha1/ack-generate-metadata.yaml
@@ -1,8 +1,8 @@
 ack_generate_info:
-  build_date: "2025-11-29T03:46:12Z"
-  build_hash: 23c7074fa310ad1ccb38946775397c203b49f024
-  go_version: go1.25.4
-  version: v0.56.0
+  build_date: "2026-01-07T18:32:30Z"
+  build_hash: e743d683160cf0f58a4864e052cdcb0927335ca7
+  go_version: go1.25.5
+  version: v0.57.0
 api_directory_checksum: 32145a35ac5a41245c0db7001a056adf2ff6d463
 api_version: v1alpha1
 aws_sdk_go_version: v1.32.6
diff --git a/config/controller/kustomization.yaml b/config/controller/kustomization.yaml
@@ -6,4 +6,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: public.ecr.aws/aws-controllers-k8s/ssm-controller
-  newTag: 1.2.0
+  newTag: 1.2.1
diff --git a/config/crd/common/bases/services.k8s.aws_iamroleselectors.yaml b/config/crd/common/bases/services.k8s.aws_iamroleselectors.yaml
@@ -63,6 +63,16 @@ spec:
                 required:
                 - names
                 type: object
+              resourceLabelSelector:
+                description: LabelSelector is a label query over a set of resources.
+                properties:
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    type: object
+                required:
+                - matchLabels
+                type: object
               resourceTypeSelector:
                 items:
                   properties:
diff --git a/config/crd/common/kustomization.yaml b/config/crd/common/kustomization.yaml
@@ -3,5 +3,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - bases/services.k8s.aws_iamroleselectors.yaml
   - bases/services.k8s.aws_fieldexports.yaml
+  - bases/services.k8s.aws_iamroleselectors.yaml
diff --git a/go.mod b/go.mod
@@ -5,7 +5,7 @@ go 1.24.0
 toolchain go1.24.1
 
 require (
-	github.com/aws-controllers-k8s/runtime v0.56.0
+	github.com/aws-controllers-k8s/runtime v0.57.0
 	github.com/aws/aws-sdk-go v1.49.0
 	github.com/aws/aws-sdk-go-v2 v1.34.0
 	github.com/aws/aws-sdk-go-v2/service/ssm v1.56.8
diff --git a/go.sum b/go.sum
@@ -1,5 +1,5 @@
-github.com/aws-controllers-k8s/runtime v0.56.0 h1:xT03K82QkY7EpdUDhVKvDY7hLddA+XnKY0xDAePALhM=
-github.com/aws-controllers-k8s/runtime v0.56.0/go.mod h1:OkUJN+Ds799JLYZsMJrO2vDJ4snxUeHK2MgrQHbU+Qc=
+github.com/aws-controllers-k8s/runtime v0.57.0 h1:cFyQtKX5n7m+soh6uVT64B1+SvmGgHfx2pyX39sXsbA=
+github.com/aws-controllers-k8s/runtime v0.57.0/go.mod h1:OkUJN+Ds799JLYZsMJrO2vDJ4snxUeHK2MgrQHbU+Qc=
 github.com/aws/aws-sdk-go v1.49.0 h1:g9BkW1fo9GqKfwg2+zCD+TW/D36Ux+vtfJ8guF4AYmY=
 github.com/aws/aws-sdk-go v1.49.0/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/aws/aws-sdk-go-v2 v1.34.0 h1:9iyL+cjifckRGEVpRKZP3eIxVlL06Qk1Tk13vreaVQU=
diff --git a/helm/Chart.yaml b/helm/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v1
 name: ssm-chart
 description: A Helm chart for the ACK service controller for Systems Manager (SSM)
-version: 1.2.0
-appVersion: 1.2.0
+version: 1.2.1
+appVersion: 1.2.1
 home: https://github.com/aws-controllers-k8s/ssm-controller
 icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
 sources:
diff --git a/helm/crds/services.k8s.aws_iamroleselectors.yaml b/helm/crds/services.k8s.aws_iamroleselectors.yaml
@@ -63,6 +63,16 @@ spec:
                 required:
                 - names
                 type: object
+              resourceLabelSelector:
+                description: LabelSelector is a label query over a set of resources.
+                properties:
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    type: object
+                required:
+                - matchLabels
+                type: object
               resourceTypeSelector:
                 items:
                   properties:
diff --git a/helm/templates/NOTES.txt b/helm/templates/NOTES.txt
@@ -1,5 +1,5 @@
 {{ .Chart.Name }} has been installed.
-This chart deploys "public.ecr.aws/aws-controllers-k8s/ssm-controller:1.2.0".
+This chart deploys "public.ecr.aws/aws-controllers-k8s/ssm-controller:1.2.1".
 
 Check its status by running:
   kubectl --namespace {{ .Release.Namespace }} get pods -l "app.kubernetes.io/instance={{ .Release.Name }}"
diff --git a/helm/templates/deployment.yaml b/helm/templates/deployment.yaml
@@ -51,6 +51,13 @@ spec:
         - "$(AWS_REGION)"
         - --aws-endpoint-url
         - "$(AWS_ENDPOINT_URL)"
+{{- if .Values.aws.identity_endpoint_url }}
+        - --aws-identity-endpoint-url
+        - "$(AWS_IDENTITY_ENDPOINT_URL)"
+{{- end }}
+{{- if .Values.aws.allow_unsafe_aws_endpoint_urls }}
+        - --allow-unsafe-aws-endpoint-urls
+{{- end }}
 {{- if .Values.log.enable_development_logging }}
         - --enable-development-logging
 {{- end }}
@@ -109,6 +116,8 @@ spec:
           value: {{ .Values.aws.region }}
         - name: AWS_ENDPOINT_URL
           value: {{ .Values.aws.endpoint_url | quote }}
+        - name: AWS_IDENTITY_ENDPOINT_URL
+          value: {{ .Values.aws.identity_endpoint_url | quote }}
         - name: ACK_WATCH_NAMESPACE
           value: {{ include "ack-ssm-controller.watch-namespace" . }}
         - name: ACK_WATCH_SELECTORS
diff --git a/helm/values.schema.json b/helm/values.schema.json
@@ -171,9 +171,16 @@
         "region": {
           "type": "string"
         },
-        "endpoint": {
+        "endpoint_url": {
           "type": "string"
         },
+        "identity_endpoint_url": {
+          "type": "string"
+        },
+        "allow_unsafe_aws_endpoint_urls": {
+          "type": "boolean",
+          "default": false
+        },
         "credentials": {
           "description": "AWS credentials information",
           "properties": {
diff --git a/helm/values.yaml b/helm/values.yaml
@@ -4,7 +4,7 @@
 
 image:
   repository: public.ecr.aws/aws-controllers-k8s/ssm-controller
-  tag: 1.2.0
+  tag: 1.2.1
   pullPolicy: IfNotPresent
   pullSecrets: []
 
@@ -90,6 +90,8 @@ aws:
   # If specified, use the AWS region for AWS API calls
   region: ""
   endpoint_url: ""
+  identity_endpoint_url: ""
+  allow_unsafe_aws_endpoint_urls: false
   credentials:
     # If specified, Secret with shared credentials file to use.
     secretName: ""
diff --git a/pkg/resource/document/delta.go b/pkg/resource/document/delta.go
diff --git a/pkg/resource/patch_baseline/delta.go b/pkg/resource/patch_baseline/delta.go
diff --git a/pkg/resource/resource_data_sync/delta.go b/pkg/resource/resource_data_sync/delta.go
