Skip to main content

Feature Gates

ACK controllers support feature gates that enable or disable specific functionality. Feature gates allow you to try experimental features or opt into beta features.

Available Feature Gates​

Feature GateStageDefaultDescription
ResourceAdoptionBetaEnabledImport existing AWS resources into ACK management using adoption annotations. Learn more
ReadOnlyResourcesBetaEnabledObserve AWS resources without ACK managing them using read-only annotation. Learn more
IAMRoleSelectorAlphaDisabledUse IAMRoleSelector CRD for dynamic IAM role mapping to namespaces and resources. Learn more
ServiceLevelCARMAlphaDisabledEnable CARM (Cross-Account Resource Management) for service-level resources
TeamLevelCARMAlphaDisabledEnable CARM (Cross-Account Resource Management) for team-level resources
Helm Chart Defaults

Some controller Helm charts may override the runtime defaults in their values.yaml. Check the specific controller's Helm chart values for the actual defaults. You can always explicitly enable features using --set featureGates.<feature>=true.

Feature Stages​

  • Alpha: Early testing phase. May be unstable or change without notice. Disabled by default.
  • Beta: Advanced testing phase. More stable than alpha. Enabled by default.
  • GA: Generally available and stable. Always enabled.

Enabling Feature Gates​

Feature gates are configured when installing ACK controllers via Helm:

helm install ack-s3-controller \
  oci://public.ecr.aws/aws-controllers-k8s/s3-chart \
  --set featureGates.IAMRoleSelector=true

Multiple feature gates can be enabled:

helm install ack-s3-controller \
  oci://public.ecr.aws/aws-controllers-k8s/s3-chart \
  --set featureGates.IAMRoleSelector=true \
  --set featureGates.TeamLevelCARM=true
CARM and IAMRoleSelector

Enabling IAMRoleSelector disables CARM features. These features cannot be used together.

Next Steps​

Built with ♥ by AWS