Update to ACK runtime v0.43.0, code-generator v0.43.1 (#110)

### Update to ACK runtime `v0.43.0`, code-generator `v0.43.1`

----------

* ACK code-generator `v0.43.1` [release notes](https://github.com/aws-controllers-k8s/code-generator/releases/tag/v0.43.1)
* ACK runtime `v0.43.0` [release notes](https://github.com/aws-controllers-k8s/runtime/releases/tag/v0.43.0)

----------

NOTE:
This PR increments the release version of service controller from `v1.0.23` to `v1.0.24`

Once this PR is merged, release `v1.0.24` will be automatically created for `ecr-controller`

**Please close this PR, if you do not want the new patch release for `ecr-controller`**

----------

#### stdout for `make build-controller`:

```
building ack-generate ... ok.
==== building ecr-controller ====
Copying common custom resource definitions into ecr
Building Kubernetes API objects for ecr
Generating deepcopy code for ecr
Generating custom resource definitions for ecr
Building service controller for ecr
Running GO mod tidy
Generating RBAC manifests for ecr
Running gofmt against generated code for ecr
Updating additional GitHub repository maintenance files
==== building ecr-controller release artifacts ====
Building release artifacts for ecr-v1.0.24
Generating common custom resource definitions
Generating custom resource definitions for ecr
Generating RBAC manifests for ecr
```

----------

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Author: ack-bot

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,9 +1,9 @@
 ack_generate_info:
-  build_date: "2025-02-18T01:01:19Z"
-  build_hash: 66c0f840b0bcf6f552be46cf5ee0fb95ad57053e
-  go_version: go1.23.6
-  version: v0.43.0
-api_directory_checksum: aedfd16c7658390ca031bad4ca0c8e0c077fa3e5
+  build_date: "2025-02-19T23:00:27Z"
+  build_hash: 8b426c490ff1984d8ce5577e11d6dabe1b6373b8
+  go_version: go1.24.0
+  version: v0.43.1
+api_directory_checksum: c885aae644c017ca0c102acbf9a4a1c77f6e1a59
 api_version: v1alpha1
 aws_sdk_go_version: v1.32.6
 generator_config_info:

apis/v1alpha1/pull_through_cache_rule.go

@@ -6,4 +6,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: public.ecr.aws/aws-controllers-k8s/ecr-controller
-  newTag: 1.0.23
+  newTag: 1.0.24

apis/v1alpha1/repository.go

@@ -44,33 +44,20 @@ spec:
               The details of a pull through cache rule.
             properties:
               ecrRepositoryPrefix:
-                description: The repository name prefix to use when caching images
-                  from the source registry.
                 type: string
+                x-kubernetes-validations:
+                - message: Value is immutable once set
+                  rule: self == oldSelf
               registryID:
-                description: |-
-                  The Amazon Web Services account ID associated with the registry to create
-                  the pull through cache rule for. If you do not specify a registry, the default
-                  registry is assumed.
                 type: string
+                x-kubernetes-validations:
+                - message: Value is immutable once set
+                  rule: self == oldSelf
               upstreamRegistryURL:
-                description: |-
-                  The registry URL of the upstream public registry to use as the source for
-                  the pull through cache rule. The following is the syntax to use for each
-                  supported upstream registry.
-
-                     * Amazon ECR Public (ecr-public) - public.ecr.aws
-
-                     * Docker Hub (docker-hub) - registry-1.docker.io
-
-                     * Quay (quay) - quay.io
-
-                     * Kubernetes (k8s) - registry.k8s.io
-
-                     * GitHub Container Registry (github-container-registry) - ghcr.io
-
-                     * Microsoft Azure Container Registry (azure-container-registry) - .azurecr.io
                 type: string
+                x-kubernetes-validations:
+                - message: Value is immutable once set
+                  rule: self == oldSelf
             required:
             - ecrRepositoryPrefix
             - upstreamRegistryURL
@@ -110,7 +97,7 @@ spec:
                 type: object
               conditions:
                 description: |-
-                  All CRS managed by ACK have a common `Status.Conditions` member that
+                  All CRs managed by ACK have a common `Status.Conditions` member that
                   contains a collection of `ackv1alpha1.Condition` objects that describe
                   the various terminal states of the CR and its backend AWS service API
                   resource

config/controller/kustomization.yaml

@@ -56,57 +56,40 @@ spec:
                 description: |-
                   The encryption configuration for the repository. This determines how the
                   contents of your repository are encrypted at rest.
+
+                  By default, when no encryption configuration is set or the AES256 encryption
+                  type is used, Amazon ECR uses server-side encryption with Amazon S3-managed
+                  encryption keys which encrypts your data at rest using an AES256 encryption
+                  algorithm. This does not require any action on your part.
+
+                  For more control over the encryption of the contents of your repository,
+                  you can use server-side encryption with Key Management Service key stored
+                  in Key Management Service (KMS) to encrypt your images. For more information,
+                  see Amazon ECR encryption at rest (https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html)
+                  in the Amazon Elastic Container Registry User Guide.
                 properties:
                   encryptionType:
                     type: string
                   kmsKey:
                     type: string
                 type: object
               imageScanningConfiguration:
-                description: |-
-                  The image scanning configuration for the repository. This determines whether
-                  images are scanned for known vulnerabilities after being pushed to the repository.
+                description: The image scanning configuration for a repository.
                 properties:
                   scanOnPush:
                     type: boolean
                 type: object
               imageTagMutability:
-                description: |-
-                  The tag mutability setting for the repository. If this parameter is omitted,
-                  the default setting of MUTABLE will be used which will allow image tags to
-                  be overwritten. If IMMUTABLE is specified, all image tags within the repository
-                  will be immutable which will prevent them from being overwritten.
                 type: string
               lifecyclePolicy:
-                description: The JSON repository policy text to apply to the repository.
                 type: string
               name:
-                description: |-
-                  The name to use for the repository. The repository name may be specified
-                  on its own (such as nginx-web-app) or it can be prepended with a namespace
-                  to group the repository into a category (such as project-a/nginx-web-app).
-
-                  The repository name must start with a letter and can only contain lowercase
-                  letters, numbers, hyphens, underscores, and forward slashes.
                 type: string
               policy:
-                description: |-
-                  The JSON repository policy text to apply to the repository. For more information,
-                  see Amazon ECR repository policies (https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html)
-                  in the Amazon Elastic Container Registry User Guide.
                 type: string
               registryID:
-                description: |-
-                  The Amazon Web Services account ID associated with the registry to create
-                  the repository. If you do not specify a registry, the default registry is
-                  assumed.
                 type: string
               tags:
-                description: |-
-                  The metadata that you apply to the repository to help you categorize and
-                  organize them. Each tag consists of a key and an optional value, both of
-                  which you define. Tag keys can have a maximum character length of 128 characters,
-                  and tag values can have a maximum length of 256 characters.
                 items:
                   description: |-
                     The metadata to apply to a resource to help you categorize and organize them.
@@ -157,7 +140,7 @@ spec:
                 type: object
               conditions:
                 description: |-
-                  All CRS managed by ACK have a common `Status.Conditions` member that
+                  All CRs managed by ACK have a common `Status.Conditions` member that
                   contains a collection of `ackv1alpha1.Condition` objects that describe
                   the various terminal states of the CR and its backend AWS service API
                   resource

config/crd/bases/ecr.services.k8s.aws_pullthroughcacherules.yaml

@@ -1,8 +1,8 @@
 apiVersion: v1
 name: ecr-chart
 description: A Helm chart for the ACK service controller for Amazon Elastic Container Registry (ECR)
-version: 1.0.23
-appVersion: 1.0.23
+version: 1.0.24
+appVersion: 1.0.24
 home: https://github.com/aws-controllers-k8s/ecr-controller
 icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
 sources:

config/crd/bases/ecr.services.k8s.aws_repositories.yaml

@@ -44,33 +44,20 @@ spec:
               The details of a pull through cache rule.
             properties:
               ecrRepositoryPrefix:
-                description: The repository name prefix to use when caching images
-                  from the source registry.
                 type: string
+                x-kubernetes-validations:
+                - message: Value is immutable once set
+                  rule: self == oldSelf
               registryID:
-                description: |-
-                  The Amazon Web Services account ID associated with the registry to create
-                  the pull through cache rule for. If you do not specify a registry, the default
-                  registry is assumed.
                 type: string
+                x-kubernetes-validations:
+                - message: Value is immutable once set
+                  rule: self == oldSelf
               upstreamRegistryURL:
-                description: |-
-                  The registry URL of the upstream public registry to use as the source for
-                  the pull through cache rule. The following is the syntax to use for each
-                  supported upstream registry.
-
-                    - Amazon ECR Public (ecr-public) - public.ecr.aws
-
-                    - Docker Hub (docker-hub) - registry-1.docker.io
-
-                    - Quay (quay) - quay.io
-
-                    - Kubernetes (k8s) - registry.k8s.io
-
-                    - GitHub Container Registry (github-container-registry) - ghcr.io
-
-                    - Microsoft Azure Container Registry (azure-container-registry) - .azurecr.io
                 type: string
+                x-kubernetes-validations:
+                - message: Value is immutable once set
+                  rule: self == oldSelf
             required:
             - ecrRepositoryPrefix
             - upstreamRegistryURL
@@ -110,7 +97,7 @@ spec:
                 type: object
               conditions:
                 description: |-
-                  All CRS managed by ACK have a common `Status.Conditions` member that
+                  All CRs managed by ACK have a common `Status.Conditions` member that
                   contains a collection of `ackv1alpha1.Condition` objects that describe
                   the various terminal states of the CR and its backend AWS service API
                   resource