late_initialize DBCluster and DBInstance fields that get defaulted by AWS

Some spec fields get default values from AWS after they are created.
These defaults cause the controller to keep requeuing, trying to set
them to null. With these changes, we late initialize these fields,
ensuring they are defaulted if the user does not define them

Author: michaelhtm

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,13 +1,13 @@
 ack_generate_info:
-  build_date: "2025-11-29T03:44:25Z"
-  build_hash: 23c7074fa310ad1ccb38946775397c203b49f024
+  build_date: "2025-12-11T00:02:14Z"
+  build_hash: 5c8b9050006ef6c7d3a97c279e7b1bc163f20a0a
   go_version: go1.25.4
-  version: v0.56.0
+  version: v0.56.0-3-g5c8b905
 api_directory_checksum: 90b0d1adcc91f4a1b1f1b436e3ac0c30d9271678
 api_version: v1alpha1
 aws_sdk_go_version: v1.32.6
 generator_config_info:
-  file_checksum: 23c3c400e5913ebaa0047af70fda453b065ce321
+  file_checksum: 760e376d79ebb1ea840b830b62f92c3142300d62
   original_file_name: generator.yaml
 last_modification:
   reason: API generation

apis/v1alpha1/generator.yaml

@@ -225,6 +225,8 @@ resources:
         compare:
           # We have a custom comparison function...
           is_ignored: true
+      DatabaseInsightsMode:
+        late_initialize: {}
     renames:
       operations:
         CreateDBCluster:
@@ -355,6 +357,26 @@ resources:
         late_initialize: {}
       NetworkType:
         late_initialize: {}
+      AutoMinorVersionUpgrade:
+        late_initialize: {}
+      CACertificateIdentifier:
+        late_initialize: {}
+      DatabaseInsightsMode:
+        late_initialize: {}
+      LicenseModel:
+        late_initialize: {}
+      MultiAZ:
+        late_initialize: {}
+      PreferredBackupWindow:
+        late_initialize: {}
+      PreferredMaintenanceWindow:
+        late_initialize: {}
+      StorageEncrypted:
+        late_initialize: {}
+      StorageThroughput:
+        late_initialize: {}
+      StorageType:
+        late_initialize: {}
       # Used by restore db instance from db snapshot
       DBSnapshotIdentifier:
         from:

generator.yaml

@@ -225,6 +225,8 @@ resources:
         compare:
           # We have a custom comparison function...
           is_ignored: true
+      DatabaseInsightsMode:
+        late_initialize: {}
     renames:
       operations:
         CreateDBCluster:
@@ -355,6 +357,26 @@ resources:
         late_initialize: {}
       NetworkType:
         late_initialize: {}
+      AutoMinorVersionUpgrade:
+        late_initialize: {}
+      CACertificateIdentifier:
+        late_initialize: {}
+      DatabaseInsightsMode:
+        late_initialize: {}
+      LicenseModel:
+        late_initialize: {}
+      MultiAZ:
+        late_initialize: {}
+      PreferredBackupWindow:
+        late_initialize: {}
+      PreferredMaintenanceWindow:
+        late_initialize: {}
+      StorageEncrypted:
+        late_initialize: {}
+      StorageThroughput:
+        late_initialize: {}
+      StorageType:
+        late_initialize: {}
       # Used by restore db instance from db snapshot
       DBSnapshotIdentifier:
         from:

helm/templates/deployment.yaml

@@ -51,6 +51,13 @@ spec:
         - "$(AWS_REGION)"
         - --aws-endpoint-url
         - "$(AWS_ENDPOINT_URL)"
+{{- if .Values.aws.identity_endpoint_url }}
+        - --aws-identity-endpoint-url
+        - "$(AWS_IDENTITY_ENDPOINT_URL)"
+{{- end }}
+{{- if .Values.aws.allow_unsafe_aws_endpoint_urls }}
+        - --allow-unsafe-aws-endpoint-urls
+{{- end }}
 {{- if .Values.log.enable_development_logging }}
         - --enable-development-logging
 {{- end }}
@@ -109,6 +116,8 @@ spec:
           value: {{ .Values.aws.region }}
         - name: AWS_ENDPOINT_URL
           value: {{ .Values.aws.endpoint_url | quote }}
+        - name: AWS_IDENTITY_ENDPOINT_URL
+          value: {{ .Values.aws.identity_endpoint_url | quote }}
         - name: ACK_WATCH_NAMESPACE
           value: {{ include "ack-rds-controller.watch-namespace" . }}
         - name: ACK_WATCH_SELECTORS

helm/values.schema.json

@@ -171,9 +171,16 @@
         "region": {
           "type": "string"
         },
-        "endpoint": {
+        "endpoint_url": {
           "type": "string"
         },
+        "identity_endpoint_url": {
+          "type": "string"
+        },
+        "allow_unsafe_aws_endpoint_urls": {
+          "type": "boolean",
+          "default": false
+        },
         "credentials": {
           "description": "AWS credentials information",
           "properties": {

helm/values.yaml

@@ -90,6 +90,8 @@ aws:
   # If specified, use the AWS region for AWS API calls
   region: ""
   endpoint_url: ""
+  identity_endpoint_url: ""
+  allow_unsafe_aws_endpoint_urls: false
   credentials:
     # If specified, Secret with shared credentials file to use.
     secretName: ""