Update to ACK runtime v0.39.0, code-generator v0.39.1 (#122)

### Update to ACK runtime `v0.39.0`, code-generator `v0.39.1`

----------

* ACK code-generator `v0.39.1` [release notes](https://github.com/aws-controllers-k8s/code-generator/releases/tag/v0.39.1)
* ACK runtime `v0.39.0` [release notes](https://github.com/aws-controllers-k8s/runtime/releases/tag/v0.39.0)

----------

NOTE:
This PR increments the release version of service controller from `v1.3.12` to `v1.3.13`

Once this PR is merged, release `v1.3.13` will be automatically created for `iam-controller`

**Please close this PR, if you do not want the new patch release for `iam-controller`**

----------

#### stdout for `make build-controller`:

```
building ack-generate ... ok.
==== building iam-controller ====
Copying common custom resource definitions into iam
Building Kubernetes API objects for iam
Generating deepcopy code for iam
Generating custom resource definitions for iam
Building service controller for iam
Generating RBAC manifests for iam
Running gofmt against generated code for iam
Updating additional GitHub repository maintenance files
==== building iam-controller release artifacts ====
Building release artifacts for iam-v1.3.13
Generating common custom resource definitions
Generating custom resource definitions for iam
Generating RBAC manifests for iam
```

----------

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Author: ack-bot

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,8 +1,8 @@
 ack_generate_info:
-  build_date: "2024-08-29T17:09:54Z"
-  build_hash: f8f98563404066ac3340db0a049d2e530e5c51cc
-  go_version: go1.22.5
-  version: v0.38.1
+  build_date: "2024-10-10T04:09:12Z"
+  build_hash: 36c2d234498c2bc4f60773ab8df632af4067f43b
+  go_version: go1.23.2
+  version: v0.39.1
 api_directory_checksum: 761a2c708651b0273bf39d98dddaf029de23d337
 api_version: v1alpha1
 aws_sdk_go_version: v1.49.0

config/controller/kustomization.yaml

@@ -6,4 +6,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: public.ecr.aws/aws-controllers-k8s/iam-controller
-  newTag: 1.3.12
+  newTag: 1.3.13

config/crd/bases/iam.services.k8s.aws_groups.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.2
   name: groups.iam.services.k8s.aws
 spec:
   group: iam.services.k8s.aws
@@ -40,19 +40,14 @@ spec:
             description: |-
               GroupSpec defines the desired state of Group.
 
-
               Contains information about an IAM group entity.
 
-
               This data type is used as a response element in the following operations:
 
-
                  * CreateGroup
 
-
                  * GetGroup
 
-
                  * ListGroups
             properties:
               inlinePolicies:
@@ -63,7 +58,6 @@ spec:
                 description: |-
                   The name of the group to create. Do not include the path in this value.
 
-
                   IAM user, group, role, and policy names must be unique within the account.
                   Names are not distinguished by case. For example, you cannot create resources
                   named both "MyResource" and "myresource".
@@ -74,11 +68,9 @@ spec:
                   (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
                   in the IAM User Guide.
 
-
                   This parameter is optional. If it is not included, it defaults to a slash
                   (/).
 
-
                   This parameter allows (through its regex pattern (http://wikipedia.org/wiki/regex))
                   a string of characters consisting of either a forward slash (/) by itself
                   or a string that must begin and end with forward slashes. In addition, it
@@ -94,7 +86,7 @@ spec:
                 items:
                   description: "AWSResourceReferenceWrapper provides a wrapper around
                     *AWSResourceReference\ntype to provide more user friendly syntax
-                    for references using 'from' field\nEx:\nAPIIDRef:\n\n\n\tfrom:\n\t
+                    for references using 'from' field\nEx:\nAPIIDRef:\n\n\tfrom:\n\t
                     \ name: my-api"
                   properties:
                     from:
@@ -129,7 +121,6 @@ spec:
                       when it has verified that an "adopted" resource (a resource where the
                       ARN annotation was set by the Kubernetes user on the CR) exists and
                       matches the supplied CR's Spec field values.
-                      TODO(vijat@): Find a better strategy for resources that do not have ARN in CreateOutputResponse
                       https://github.com/aws/aws-controllers-k8s/issues/270
                     type: string
                   ownerAccountID:

config/crd/bases/iam.services.k8s.aws_instanceprofiles.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.2
   name: instanceprofiles.iam.services.k8s.aws
 spec:
   group: iam.services.k8s.aws
@@ -40,29 +40,22 @@ spec:
             description: |-
               InstanceProfileSpec defines the desired state of InstanceProfile.
 
-
               Contains information about an instance profile.
 
-
               This data type is used as a response element in the following operations:
 
-
                  * CreateInstanceProfile
 
-
                  * GetInstanceProfile
 
-
                  * ListInstanceProfiles
 
-
                  * ListInstanceProfilesForRole
             properties:
               name:
                 description: |-
                   The name of the instance profile to create.
 
-
                   This parameter allows (through its regex pattern (http://wikipedia.org/wiki/regex))
                   a string of characters consisting of upper and lowercase alphanumeric characters
                   with no spaces. You can also include any of the following characters: _+=,.@-
@@ -73,11 +66,9 @@ spec:
                   Identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
                   in the IAM User Guide.
 
-
                   This parameter is optional. If it is not included, it defaults to a slash
                   (/).
 
-
                   This parameter allows (through its regex pattern (http://wikipedia.org/wiki/regex))
                   a string of characters consisting of either a forward slash (/) by itself
                   or a string that must begin and end with forward slashes. In addition, it
@@ -90,7 +81,7 @@ spec:
               roleRef:
                 description: "AWSResourceReferenceWrapper provides a wrapper around
                   *AWSResourceReference\ntype to provide more user friendly syntax
-                  for references using 'from' field\nEx:\nAPIIDRef:\n\n\n\tfrom:\n\t
+                  for references using 'from' field\nEx:\nAPIIDRef:\n\n\tfrom:\n\t
                   \ name: my-api"
                 properties:
                   from:
@@ -111,7 +102,6 @@ spec:
                   information about tagging, see Tagging IAM resources (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html)
                   in the IAM User Guide.
 
-
                   If any one of the tags is invalid or if you exceed the allowed maximum number
                   of tags, then the entire request fails and the resource is not created.
                 items:
@@ -147,7 +137,6 @@ spec:
                       when it has verified that an "adopted" resource (a resource where the
                       ARN annotation was set by the Kubernetes user on the CR) exists and
                       matches the supplied CR's Spec field values.
-                      TODO(vijat@): Find a better strategy for resources that do not have ARN in CreateOutputResponse
                       https://github.com/aws/aws-controllers-k8s/issues/270
                     type: string
                   ownerAccountID:

config/crd/bases/iam.services.k8s.aws_openidconnectproviders.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.2
   name: openidconnectproviders.iam.services.k8s.aws
 spec:
   group: iam.services.k8s.aws
@@ -47,12 +47,10 @@ spec:
                   that identifies the application. This is the value that's sent as the client_id
                   parameter on OAuth requests.
 
-
                   You can register multiple client IDs with the same provider. For example,
                   you might have multiple applications that use the same OIDC provider. You
                   cannot register more than 100 client IDs with a single IAM OIDC provider.
 
-
                   There is no defined format for a client ID. The CreateOpenIDConnectProviderRequest
                   operation accepts client IDs up to 255 characters long.
                 items:
@@ -65,7 +63,6 @@ spec:
                   information about tagging, see Tagging IAM resources (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html)
                   in the IAM User Guide.
 
-
                   If any one of the tags is invalid or if you exceed the allowed maximum number
                   of tags, then the entire request fails and the resource is not created.
                 items:
@@ -89,19 +86,16 @@ spec:
                   lets you maintain multiple thumbprints if the identity provider is rotating
                   certificates.
 
-
                   The server certificate thumbprint is the hex-encoded SHA-1 hash value of
                   the X.509 certificate used by the domain where the OpenID Connect provider
                   makes its keys available. It is always a 40-character string.
 
-
                   You must provide at least one thumbprint when creating an IAM OIDC provider.
                   For example, assume that the OIDC provider is server.example.com and the
                   provider stores its keys at https://keys.server.example.com/openid-connect.
                   In that case, the thumbprint string would be the hex-encoded SHA-1 hash value
                   of the certificate used by https://keys.server.example.com.
 
-
                   For more information about obtaining the OIDC provider thumbprint, see Obtaining
                   the thumbprint for an OpenID Connect provider (https://docs.aws.amazon.com/IAM/latest/UserGuide/identity-providers-oidc-obtain-thumbprint.html)
                   in the IAM user Guide.
@@ -116,7 +110,6 @@ spec:
                   Typically the URL consists of only a hostname, like https://server.example.org
                   or https://example.com. The URL should not contain a port number.
 
-
                   You cannot register the same provider multiple times in a single Amazon Web
                   Services account. If you try to submit a URL that has already been used for
                   an OpenID Connect provider in the Amazon Web Services account, you will get
@@ -144,7 +137,6 @@ spec:
                       when it has verified that an "adopted" resource (a resource where the
                       ARN annotation was set by the Kubernetes user on the CR) exists and
                       matches the supplied CR's Spec field values.
-                      TODO(vijat@): Find a better strategy for resources that do not have ARN in CreateOutputResponse
                       https://github.com/aws/aws-controllers-k8s/issues/270
                     type: string
                   ownerAccountID:

config/crd/bases/iam.services.k8s.aws_policies.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.2
   name: policies.iam.services.k8s.aws
 spec:
   group: iam.services.k8s.aws
@@ -40,14 +40,11 @@ spec:
             description: |-
               PolicySpec defines the desired state of Policy.
 
-
               Contains information about a managed policy.
 
-
               This data type is used as a response element in the CreatePolicy, GetPolicy,
               and ListPolicies operations.
 
-
               For more information about managed policies, refer to Managed policies and
               inline policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html)
               in the IAM User Guide.
@@ -56,19 +53,16 @@ spec:
                 description: |-
                   A friendly description of the policy.
 
-
                   Typically used to store information about the permissions defined in the
                   policy. For example, "Grants access to production DynamoDB tables."
 
-
                   The policy description is immutable. After a value is assigned, it cannot
                   be changed.
                 type: string
               name:
                 description: |-
                   The friendly name of the policy.
 
-
                   IAM user, group, role, and policy names must be unique within the account.
                   Names are not distinguished by case. For example, you cannot create resources
                   named both "MyResource" and "myresource".
@@ -77,60 +71,49 @@ spec:
                 description: |-
                   The path for the policy.
 
-
                   For more information about paths, see IAM identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
                   in the IAM User Guide.
 
-
                   This parameter is optional. If it is not included, it defaults to a slash
                   (/).
 
-
                   This parameter allows (through its regex pattern (http://wikipedia.org/wiki/regex))
                   a string of characters consisting of either a forward slash (/) by itself
                   or a string that must begin and end with forward slashes. In addition, it
                   can contain any ASCII character from the ! (\u0021) through the DEL character
                   (\u007F), including most punctuation characters, digits, and upper and lowercased
                   letters.
 
-
                   You cannot use an asterisk (*) in the path name.
                 type: string
               policyDocument:
                 description: |-
                   The JSON policy document that you want to use as the content for the new
                   policy.
 
-
                   You must provide policies in JSON format in IAM. However, for CloudFormation
                   templates formatted in YAML, you can provide the policy in JSON or YAML format.
                   CloudFormation always converts a YAML policy to JSON format before submitting
                   it to IAM.
 
-
                   The maximum length of the policy document that you can pass in this operation,
                   including whitespace, is listed below. To view the maximum character counts
                   of a managed policy with no whitespaces, see IAM and STS character quotas
                   (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-quotas-entity-length).
 
-
                   To learn more about JSON policy grammar, see Grammar of the IAM JSON policy
                   language (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_grammar.html)
                   in the IAM User Guide.
 
-
                   The regex pattern (http://wikipedia.org/wiki/regex) used to validate this
                   parameter is a string of characters consisting of the following:
 
-
                      * Any printable ASCII character ranging from the space character (\u0020)
                      through the end of the ASCII character range
 
-
                      * The printable characters in the Basic Latin and Latin-1 Supplement character
                      set (through \u00FF)
 
-
                      * The special characters tab (\u0009), line feed (\u000A), and carriage
                      return (\u000D)
                 type: string
@@ -141,7 +124,6 @@ spec:
                   about tagging, see Tagging IAM resources (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html)
                   in the IAM User Guide.
 
-
                   If any one of the tags is invalid or if you exceed the allowed maximum number
                   of tags, then the entire request fails and the resource is not created.
                 items:
@@ -178,7 +160,6 @@ spec:
                       when it has verified that an "adopted" resource (a resource where the
                       ARN annotation was set by the Kubernetes user on the CR) exists and
                       matches the supplied CR's Spec field values.
-                      TODO(vijat@): Find a better strategy for resources that do not have ARN in CreateOutputResponse
                       https://github.com/aws/aws-controllers-k8s/issues/270
                     type: string
                   ownerAccountID:
@@ -254,7 +235,6 @@ spec:
                   The number of entities (users and roles) for which the policy is used to
                   set the permissions boundary.
 
-
                   For more information about permissions boundaries, see Permissions boundaries
                   for IAM identities (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html)
                   in the IAM User Guide.
@@ -264,7 +244,6 @@ spec:
                 description: |-
                   The stable and unique string identifying the policy.
 
-
                   For more information about IDs, see IAM identifiers (https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
                   in the IAM User Guide.
                 type: string
@@ -273,7 +252,6 @@ spec:
                   The date and time, in ISO 8601 date-time format (http://www.iso.org/iso/iso8601),
                   when the policy was last updated.
 
-
                   When a policy has only one version, this field contains the date and time
                   when the policy was created. When a policy has more than one version, this
                   field contains the date and time when the most recent policy version was