Update to ACK runtime v0.46.1, code-generator v0.46.2 (#138)

### Update to ACK runtime `v0.46.1`, code-generator `v0.46.2`

----------

* ACK code-generator `v0.46.2` [release notes](https://github.com/aws-controllers-k8s/code-generator/releases/tag/v0.46.2)
* ACK runtime `v0.46.1` [release notes](https://github.com/aws-controllers-k8s/runtime/releases/tag/v0.46.1)

----------

NOTE:
This PR increments the release version of service controller from `v1.3.20` to `v1.3.21`

Once this PR is merged, release `v1.3.21` will be automatically created for `iam-controller`

**Please close this PR, if you do not want the new patch release for `iam-controller`**

----------

#### stdout for `make build-controller`:

```
building ack-generate ... ok.
==== building iam-controller ====
Copying common custom resource definitions into iam
Building Kubernetes API objects for iam
Generating deepcopy code for iam
Generating custom resource definitions for iam
Building service controller for iam
Running GO mod tidy
Generating RBAC manifests for iam
Running gofmt against generated code for iam
Updating additional GitHub repository maintenance files
==== building iam-controller release artifacts ====
Building release artifacts for iam-v1.3.21
Generating common custom resource definitions
Generating custom resource definitions for iam
Generating RBAC manifests for iam
```

----------

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Author: ack-bot

OWNERS_ALIASES

@@ -5,10 +5,10 @@ aliases:
     - a-hilaly
     - jlbutler
     - michaelhtm
-    - TiberiuGC
     - rushmash91
     - knottnt
   # emeritus-core-ack-team:
+  #   - TiberiuGC
   #   - jaypipes
   #   - jljaco
   #   - mhausenblas

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,8 +1,8 @@
 ack_generate_info:
-  build_date: "2025-05-02T16:46:04Z"
-  build_hash: f8dc5330705b3752ce07dce0ac831161fd4cb14f
+  build_date: "2025-05-13T05:08:01Z"
+  build_hash: 55bf57b2806c33a7fcd074be403f26ce3f8e58db
   go_version: go1.24.2
-  version: v0.45.0
+  version: v0.46.2
 api_directory_checksum: 7e1c19231d3275a1147157f6943a7391953f7001
 api_version: v1alpha1
 aws_sdk_go_version: v1.32.6

config/controller/kustomization.yaml

@@ -6,4 +6,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: public.ecr.aws/aws-controllers-k8s/iam-controller
-  newTag: 1.3.20
+  newTag: 1.3.21

go.mod

@@ -5,7 +5,7 @@ go 1.24.0
 toolchain go1.24.1
 
 require (
-	github.com/aws-controllers-k8s/runtime v0.45.0
+	github.com/aws-controllers-k8s/runtime v0.46.1
 	github.com/aws/aws-sdk-go v1.49.0
 	github.com/aws/aws-sdk-go-v2 v1.34.0
 	github.com/aws/aws-sdk-go-v2/service/iam v1.38.8

go.sum

@@ -1,7 +1,7 @@
 github.com/a-hilaly/aws-iam-policy v0.0.0-20231121054900-2c56e839ca53 h1:2uNM0nR2WUDN88EYFxjEaroH+PZJ6k/h9kl+KO0dWVc=
 github.com/a-hilaly/aws-iam-policy v0.0.0-20231121054900-2c56e839ca53/go.mod h1:Ojgst9ZFn+VEEJpqtuw/LxVGqEf2+hwWBlkYWvF/XWM=
-github.com/aws-controllers-k8s/runtime v0.45.0 h1:b0xCqIE1SNve/jcJPW/QkCGkDmjxWtWTDFHKZpHJcFQ=
-github.com/aws-controllers-k8s/runtime v0.45.0/go.mod h1:G2UMBKA7qgXG4JV16NTIUp715uqvUEvWaa7TG1I527U=
+github.com/aws-controllers-k8s/runtime v0.46.1 h1:61RU6uYiFSp0cDhv52vAmaPzrebzoudtsp1fGkk6iLk=
+github.com/aws-controllers-k8s/runtime v0.46.1/go.mod h1:G2UMBKA7qgXG4JV16NTIUp715uqvUEvWaa7TG1I527U=
 github.com/aws/aws-sdk-go v1.49.0 h1:g9BkW1fo9GqKfwg2+zCD+TW/D36Ux+vtfJ8guF4AYmY=
 github.com/aws/aws-sdk-go v1.49.0/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/aws/aws-sdk-go-v2 v1.34.0 h1:9iyL+cjifckRGEVpRKZP3eIxVlL06Qk1Tk13vreaVQU=

helm/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v1
 name: iam-chart
 description: A Helm chart for the ACK service controller for AWS Identity & Access Management (IAM)
-version: 1.3.20
-appVersion: 1.3.20
+version: 1.3.21
+appVersion: 1.3.21
 home: https://github.com/aws-controllers-k8s/iam-controller
 icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
 sources:

helm/templates/NOTES.txt

@@ -1,5 +1,5 @@
 {{ .Chart.Name }} has been installed.
-This chart deploys "public.ecr.aws/aws-controllers-k8s/iam-controller:1.3.20".
+This chart deploys "public.ecr.aws/aws-controllers-k8s/iam-controller:1.3.21".
 
 Check its status by running:
   kubectl --namespace {{ .Release.Namespace }} get pods -l "app.kubernetes.io/instance={{ .Release.Name }}"

helm/templates/deployment.yaml

@@ -59,6 +59,8 @@ spec:
         - "$(ACK_WATCH_NAMESPACE)"
         - --watch-selectors
         - "$(ACK_WATCH_SELECTORS)"
+        - --reconcile-resources
+        - "$(RECONCILE_RESOURCES)"
         - --deletion-policy
         - "$(DELETION_POLICY)"
 {{- if .Values.leaderElection.enabled }}
@@ -107,6 +109,8 @@ spec:
           value: {{ include "ack-iam-controller.watch-namespace" . }}
         - name: ACK_WATCH_SELECTORS
           value: {{ .Values.watchSelectors }}
+        - name: RECONCILE_RESOURCES
+          value: {{ join "," .Values.reconcile.resources | quote }}
         - name: DELETION_POLICY
           value: {{ .Values.deletionPolicy }}
         - name: LEADER_ELECTION_NAMESPACE

helm/values.schema.json

@@ -239,6 +239,14 @@
         },
         "resourceMaxConcurrentSyncs": {
           "type": "object"
+        },
+        "resources": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "List of resource kinds to reconcile. If empty, all resources will be reconciled.",
+          "default": []
         }
       },
       "type": "object"

helm/values.yaml

@@ -4,7 +4,7 @@
 
 image:
   repository: public.ecr.aws/aws-controllers-k8s/iam-controller
-  tag: 1.3.20
+  tag: 1.3.21
   pullPolicy: IfNotPresent
   pullSecrets: []
 
@@ -137,6 +137,17 @@ reconcile:
   # An object representing the reconcile max concurrent syncs configuration for each specific
   # resource.
   resourceMaxConcurrentSyncs: {}
+  
+  # Set the value of resources to specify which resource kinds to reconcile.
+  # If empty, all resources will be reconciled.
+  # If specified, only the listed resource kinds will be reconciled.
+  resources:
+    - Group
+    - InstanceProfile
+    - OpenIDConnectProvider
+    - Policy
+    - Role
+    - User
 
 serviceAccount:
   # Specifies whether a service account should be created