v0.17.5

Changes

worker: fail on missing certificates (#747)
Controller manages loadbalancer lifecycle based on available
certificates.
Prevent controller from deleting loadbalancers when there are no
certificates found e.g. due to a bug like #725 or a tag filter
misconfiguration (#658).

Docker image

Docker image is available in Zalando's Open Source registry:

docker run -it registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.17.5 --help

v0.17.4

Changes

certs/fake: refactor CertificateProvider (#746)
Refactor fake certificate provider to enable creation of multiple
certificates with the same CA and to allow manual mocking of
GetCertificates result.
Follow up on #615 and #587

Docker image

Docker image is available in Zalando's Open Source registry:

docker run -it registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.17.4 --help

v0.17.3

Changes

build(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 (#741)
Bumps golang.org/x/net from 0.33.0 to
0.38.0.

Commits

• e1fcd82 html: properly handle trailing solidus in unquoted attribute value in foreign...
• ebed060 internal/http3: fix build of tests with GOEXPERIMENT=nosynctest
• 1f1fa29 publicsuffix: regenerate table
• 1215081 http2: improve error when server sends HTTP/1
• 312450e html: ensure <search> tag closes <p> and update tests
• 09731f9 http2: improve handling of lost PING in Server
• 55989e2 http2/h2c: use ResponseController for hijacking connections
• 2914f46 websocket: re-recommend gorilla/websocket
• 99b3ae0 go.mod: update golang.org/x dependencies
• 85d1d54 go.mod: update golang.org/x dependencies
• Additional commits viewable in compare view

[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zalando-incubator/kube-ingress-aws-controller/network/alerts).

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Docker image

Docker image is available in Zalando's Open Source registry:

docker run -it registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.17.3 --help

v0.17.2

Changes

build(deps): bump github.com/redis/go-redis/v9 from 9.7.0 to 9.7.3 (#739)
Bumps github.com/redis/go-redis/v9
from 9.7.0 to 9.7.3.

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

v9.7.3

What's Changed

• fix: handle network error on SETINFO (#3295) (CVE-2025-29923)

Full Changelog: redis/go-redis@v9.7.1...v9.7.3

v9.7.1

Changes

• Recognize byte slice for key argument in cluster client hash slot computation (#3049)
• fix(search&aggregate):fix error overwrite and typo #3220 (#3224)
• fix: linter configuration (#3279)
• fix(search): if ft.aggregate use limit when limitoffset is zero (#3275)
• Reinstate read-only lock on hooks access in dialHook to fix data race (#3225)
• fix: flaky ClientKillByFilter test (#3268)
• chore: fix some comments (#3226)
• fix(aggregate, search): ft.aggregate bugfixes (#3263)
• fix: add unstableresp3 to cluster client (#3266)
• Fix race condition in clusterNodes.Addrs() (#3219)
• SortByWithCount FTSearchOptions fix (#3201)
• Eliminate redundant dial mutex causing unbounded connection queue contention (#3088)
• Add guidance on unstable RESP3 support for RediSearch commands to README (#3177)

🚀 New Features

• Add guidance on unstable RESP3 support for RediSearch commands to README (#3177)

🐛 Bug Fixes

• fix(search): if ft.aggregate use limit when limitoffset is zero (#3275)
• fix: add unstableresp3 to cluster client (#3266)
• fix(aggregate, search): ft.aggregate bugfixes (#3263)
• SortByWithCount FTSearchOptions fix (#3201)
• Recognize byte slice for key argument in cluster client hash slot computation (#3049)

Contributors

We'd like to thank all the contributors who worked on this release!

@​ofekshenawa, @​Cgol9, @​LINKIWI, @​shawnwgit, @​zhuhaicity, @​bitsark, @​vladvildanov, @​ndyakov

Full Changelog: redis/go-redis@v9.7.0...v9.7.1

Commits

• a29d91d release 9.7.3, retract 9.7.2 (#3314)
• ce3034c bump version to 9.7.2
• 0af2b32 fix: handle network error on SETINFO (#3295) (CVE-2025-29923)
• 3d041a1 release: 9.7.1 patch (#3278)
• See full diff in compare view

[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zalando-incubator/kube-ingress-aws-controller/network/alerts).

> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Docker image

Docker image is available in Zalando's Open Source registry:

docker run -it registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.17.2 --help

v0.17.1

Changes

build(deps): bump docker/build-push-action from 3 to 6 (#728)
Bumps
docker/build-push-action
from 3 to 6.

Release notes

Sourced from docker/build-push-action's releases.

v6.0.0

• Export build record and generate build summary by @​crazy-max in docker/build-push-action#1120
• Bump @​docker/actions-toolkit from 0.24.0 to 0.26.0 in docker/build-push-action#1132 docker/build-push-action#1136 docker/build-push-action#1138
• Bump braces from 3.0.2 to 3.0.3 in docker/build-push-action#1137

[!NOTE] This major release adds support for generating Build summary and exporting build record for your build. You can disable this feature by setting DOCKER_BUILD_NO_SUMMARY: true environment variable in your workflow.

Full Changelog: docker/build-push-action@v5.4.0...v6.0.0

v5.4.0

• Show builder information before building by @​crazy-max in docker/build-push-action#1128
• Handle attestations correctly with provenance and sbom inputs by @​crazy-max in docker/build-push-action#1086
• Bump @​docker/actions-toolkit from 0.19.0 to 0.24.0 in docker/build-push-action#1088 docker/build-push-action#1105 docker/build-push-action#1121 docker/build-push-action#1127
• Bump undici from 5.28.3 to 5.28.4 in docker/build-push-action#1090

Full Changelog: docker/build-push-action@v5.3.0...v5.4.0

v5.3.0

• Bump @​docker/actions-toolkit from 0.18.0 to 0.19.0 in docker/build-push-action#1080

Full Changelog: docker/build-push-action@v5.2.0...v5.3.0

v5.2.0

• Disable quotes detection for outputs input by @​crazy-max in docker/build-push-action#1074
• Warn about ignored inputs by @​favonia in docker/build-push-action#1019
• Bump @​docker/actions-toolkit from 0.14.0 to 0.18.0 in docker/build-push-action#1070
• Bump undici from 5.26.3 to 5.28.3 in docker/build-push-action#1057

Full Changelog: docker/build-push-action@v5.1.0...v5.2.0

v5.1.0

• Add annotations input by @​crazy-max in docker/build-push-action#992
• Add secret-envs input by @​elias-lundgren in docker/build-push-action#980
• Bump @​babel/traverse from 7.17.3 to 7.23.2 in docker/build-push-action#991
• Bump @​docker/actions-toolkit from 0.13.0-rc.1 to 0.14.0 in docker/build-push-action#990 docker/build-push-action#1006

Full Changelog: docker/build-push-action@v5.0.0...v5.1.0

v5.0.0

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in docker/build-push-action#954
• Bump @​actions/core from 1.10.0 to 1.10.1 in docker/build-push-action#959

Full Changelog: docker/build-push-action@v4.2.1...v5.0.0

v4.2.1

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

... (truncated)

Commits

• 4f58ea7 Merge pull request #1234 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 49b5ea6 chore: update generated content
• 13c9fdd chore(deps): Bump @​docker/actions-toolkit from 0.38.0 to 0.39.0
• e44afff Merge pull request #1232 from docker/dependabot/npm_and_yarn/path-to-regexp-6...
• 67ebad3 chore(deps): Bump path-to-regexp from 6.2.2 to 6.3.0
• 32945a3 Merge pull request #1230 from docker/dependabot/npm_and_yarn/docker/actions-t...
• e0fe9cf chore: update generated content
• 8f1ff6b chore(deps): Bump @​docker/actions-toolkit from 0.37.1 to 0.38.0
• 5cd11c3 Merge pull request #1211 from crazy-max/summary-info-message
• 0aba704 chore: update generated content
• Additional commits viewable in compare view

[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)...

v0.17.0

Changes

Update AWS Adapter APIs to use the controller context (#743)
This change is next step after the AWS SDK Go v2 migration
#723,
in this change we update the controller APIs to use the controller
context and pass it to the AWS SDK.
fixes zalando-incubator/kubernetes-on-aws#9396

Co-authored-by: speruri surya.srikar.peruri@zalando.de

Docker image

Docker image is available in Zalando's Open Source registry:

docker run -it registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.17.0 --help

v0.16.0

Changes

upgrade: migrate to aws sdk go v2 (#742)
This change migrates the controller to aws sdk go v2 version as the
support for sdk v1 is ending on July 31, 2025
Fixes #723

Docker image

Docker image is available in Zalando's Open Source registry:

docker run -it registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.16.0 --help

v0.15.35

Changes

Merge pull request #738 from zalando-incubator/dependabot/go_modules/github.com/containerd/containerd-1.7.27
build(deps): bump github.com/containerd/containerd from 1.7.22 to 1.7.27

Docker image

Docker image is available in Zalando's Open Source registry:

docker run -it registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.15.35 --help

v0.15.34

Changes

Merge pull request #735 from zalando-incubator/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5

Docker image

Docker image is available in Zalando's Open Source registry:

docker run -it registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.15.34 --help

v0.15.33

Changes

build(deps): bump the all-go-mod-patch-and-minor group across 1 directory with 3 updates (#733)
Bumps the all-go-mod-patch-and-minor group with 3 updates in the / directory: github.com/prometheus/client_golang, github.com/stretchr/testify and github.com/zalando/skipper.
Updates github.com/prometheus/client_golang from 1.20.4 to 1.20.5

• Release notes
• Changelog
• Commits
  Updates github.com/stretchr/testify from 1.9.0 to 1.10.0
• Release notes
• Commits
  Updates github.com/zalando/skipper from 0.21.211 to 0.21.240
• Release notes
• Commits

---

updated-dependencies:

• dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
• dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
• dependency-name: github.com/zalando/skipper
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
  ...
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Docker image

Docker image is available in Zalando's Open Source registry:

docker run -it registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.15.33 --help