v2.15.0

📚 Quick Links

v2.15.0 (requires Kubernetes 1.22+)

Image: public.ecr.aws/eks/aws-load-balancer-controller:v2.15.0

Documentation

Thanks to all our contributors!💜💜💜

---

What’s new

We're excited to announce two new features!

• ALB has added the ability to configure JWT validation. See the what's new post for more information. https://aws.amazon.com/about-aws/whats-new/2025/11/application-load-balancer-jwt-verification. For more information, check out the new ingress annotation, alb.ingress.kubernetes.io/jwt-validation.
• NLB has added a new protocol, QUIC pass through. See the what's new post for more information. https://aws.amazon.com/about-aws/whats-new/2025/11/aws-network-load-balancer-quic-passthrough-mode. To see how to get started with QUIC and the load balancer controller, checkout the new use case: https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.15/guide/use_cases/quic/

What's Changed

• fix: Race condition in webhook certificate renewal with cert-manager self-signed issuer without a dedicated CA certificate by @praddy26 in #4359
• [feat: aga] add accelerator model builder by @shraddhabang in #4403
• [gw api] add disable security group flag to lb config for gateway users by @zac-nixon in #4404
• [gw api] discover certs for route hostnames by @zac-nixon in #4407
• [gw api] Support literal target group ARNs by @zac-nixon in #4406
• Fix EIP Allocations annotation in docs by @arcdigital in #4409
• [feat gw-api]return multiple types in listener status by @shuqz in #4411
• [gw api] Support SG rule generation for no SG LBs by @zac-nixon in #4413
• Add generic tag processing system for controllers by @shraddhabang in #4415
• update to go 1.24.9 by @zac-nixon in #4421
• [gw api] fix listener config generation when port is duplicated by @zac-nixon in #4419
• [feat gw-api]handle hostname intersection by @shuqz in #4417
• [feat gw-api]add conformance test setup by @shuqz in #4422
• Correct hostname by @wweiwei-li in #4425
• Add eusc iam policy by @wweiwei-li in #4426
• New use case "Legacy App Integration" by @dumlutimuralp in #4424
• Support URLRewrite in HTTPRoutes by @zac-nixon in #4418
• [gw api] Implement ALB target of NLB by @zac-nixon in #4430
• Correct enum for healthCheckProtocol field by @dex4er in #4432
• [feat aga] Disable AGAController as its in ready yet by @shraddhabang in #4435
• add shuqz in owner file by @shuqz in #4441
• update to use controller-gen v0.19.0 by @shuqz in #4444
• Add support for jwt validation action at the ingress level by @sarevalo2002 in #4445
• Add support QUIC Passthrough for NLB by @zac-nixon in #4448
• v2.15.0 release by @zac-nixon in #4449

New Contributors

• @arcdigital made their first contribution in #4409
• @dumlutimuralp made their first contribution in #4424
• @dex4er made their first contribution in #4432

Full Changelog: v2.14.1...v2.15.0