v2.13.4 (requires Kubernetes 1.22+)

Documentation

Image: public.ecr.aws/eks/aws-load-balancer-controller:v2.13.4
Thanks to all our contributors! 😊

Action required

🚨 🚨 🚨 For user who is trying out our gateway api features, we’ve created a new CRD ListenerRuleConfiguration. Make sure to update the CRD definition in your cluster. If you're upgrading the charts using helm upgrade, you need to update CRDs manually: kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/refs/heads/main/config/crd/gateway/gateway-crds.yaml also update rbac policy by applying the latest changes from rbac.yaml

What’s new

We’ve been working on ALB support in Gateway API. Some of the main additions are:

• introduced a new ListenerRuleConfiguration CRD that lets you use those AWS ALB features that Gateway API doesn't support yet. Note: we have not complete all development on this new CRD. Therefore, it is not recommended to use it at this time.
• added Reference Grant support
• added mTLS support
• weighted target group is now supported for HTTPRoutes
• TLS listeners now accept TCP routes

Enhancement and Fixes

• Upgraded Go to 1.24.5
• Fixed NLB security groups not working when multiple security groups assigned
• Added Patch permission to loadbalancerconfigurations in helm chart
• Made the error message more clear when someone tries to use ClusterIP services with Instance targets
• CI now runs on K8s 1.32 instead of 1.25
• Increased E2E test coverage

Full Changelog

• feat: Allow usage of namedPorts for sidecar containers by @heshamelsherif97 in #4237
• Feat(performance): Use protobuf as default type instead of json by @RiskyAdventure in #4093
• update ci k8s version by @zac-nixon in #4244
• clear confusion around using ClusterIP service and Instance targets by @zac-nixon in #4243
• [feat gw-api]implement httproute matching and weighted target group by @shuqz in #4241
• Bugfix: Add ability to patch loadbalancerconfigurations to helm RBAC by @timothy-spencer in #4248
• [gw api] add TLS and UDP listener tests. Fix bugs that were found from the tests by @zac-nixon in #4250
• [feat gw-api]support httproute filter type - RequestRedirect by @shuqz in #4255
• [feat: gw api] Add secure HTTPRoute and mutual auth support for L7 Ga… by @shraddhabang in #4259
• fix frontend NLB security group by @wweiwei-li in #4261
• [feat: gw api] Add Rules CRD for customizing Gateway API L7 routes by @shraddhabang in #4265
• Update K8s version support by @realjoshparker in #4266
• [feat gw-api] backfill E2E tests by @shuqz in #4264
• [gw api] Reference Grant support to allow cross namespace service access by @zac-nixon in #4267
• refactor how no backends are modeled in NLB / ALB Gateways by @zac-nixon in #4273
• [feat: gw api] Add event handling for Rules CRD by @shraddhabang in #4274
• [feat gw-api] implement grpcroute match by @shuqz in #4270
• [feat: gw api] Add finalizers for Rules CRD by @shraddhabang in #4275
• upgrade go version to 1.24.5 by @shuqz in #4276
• cut v2.13.4 release by @shuqz in #4278

New Contributors

• @heshamelsherif97 made their first contribution in #4237
• @RiskyAdventure made their first contribution in #4093
• @timothy-spencer made their first contribution in #4248
• @realjoshparker made their first contribution in #4266

Full Changelog: v2.13.3...v2.13.4