aws-load-balancer-controller

aws-load-balancer-controller copied to clipboard

[Enhancement] Even when IRSA is used, pod still try IMDS when vpcId is not specified

5

**Is your feature request related to a problem?** Even when IRSA is used, default values for `aws-region` and `aws-vpc-id` are still autofilled using IMDS. Which is not achievable in secure...

phuhung273

Support for NLB Subnet Updates

4

**Describe the feature you are requesting** Replace an NLB subnet in an existing AZ without manually removing and replacing **Motivation** AWS recently put out an article on how to NLB...

mhawley1230

Support reading Headers values from Secrets

7

**Is your feature request related to a problem?** We need to configure rule conditions based on specific Header values. However, these values can contain sensitive data so we don't want...

ivanfoo

newly tagged subnets are not added to load balancer via subnet discovery

3

Is your feature request related to a problem? Past issues: https://github.com/kubernetes-sigs/aws-load-balancer-controller/issues/2930 https://github.com/kubernetes-sigs/aws-load-balancer-controller/issues/3157 If a tag is added to a new subnet the LB controller does not add it to the...

nwsparks

LB configuraion is not working Using Gateway API

5

Migrating the k8s Ingress to Gateway API with a the istio ingress pods . Here is my config . ``` apiVersion: gateway.k8s.aws/v1beta1 kind: LoadBalancerConfiguration metadata: name: internet-facing-config namespace: istio-system spec:...

anannaya

Feature Request: Support EndpointSlices Without In-cluster Pod Targets in Ingress

10

### Related Problem When deploying a multi-cluster EKS environment that shares services via the Multi-Cluster Services (MCS) API, multiple EndpointSlices may be created for a single Service. Currently, in “target-type:...

kahirokunn

Allow specifying prefix lists by names

6

**Describe the feature you are requesting** Ability to specify prefix lists by names rather than IDs. **Motivation** `aws-load-balancer-security-group-prefix-lists` service annotation expects you to provide prefix list IDs. This is rather...

artem-nefedov

EKS Automode - cant specify header attributes

4

- Bug Description EKS Cluster with automode enabled v1.32. When I create or update an ingress and use annotation like the following: alb.ingress.kubernetes.io/listener-attributes.HTTPS-443: routing.http.response.strict_transport_security.header_value=max-age=600; includeSubDomains; preload the corresponding load-balancer is...

jcuribe

ClientHello too large due to Go 1.23 post-quantum crypto – breaks with AWS Network Firewall (Suricata)

1

**Bug Description** After upgrading to AWS Load Balancer Controller v2.12.0 (which uses Go 1.23), the controller could not connect to AWS APIs when running behind **AWS Network Firewall** with Suricata...

jnielsen-monster

Add authenticationConfiguration to Ingress Class Params

8

### Issue https://github.com/kubernetes-sigs/aws-load-balancer-controller/issues/3858 ### Description - Add `authenticationConfiguration` to IngressClassParams, allowing users to configure the authentication for all Ingresses in the IngressGroup associated with the IngressClass - Add error handling...

kellyyan