fix: ignore attributes update empty (#96)

Issue [#2247](aws-controllers-k8s/community#2247)

Description of changes:
This change is required for users migrating from an older sqs controller
(pre sdk v2 migration) to the latest one. In aws sdk go v1, the sdk
update was able to send empty attributes, and no error was returned.
When we migrated to v2, empty attributes when calling SetQueueAttributes
was no longer an option. We were able to mitigate this issue by late
initializing the defaulted fields when creating a queue to avoid
exposing them in the delta. This mitigation did not handle cases in
which users migrate to the latest version, as the resource is not late
initialized if update fails. With this change, we will avoid calling
update if there are no attributes defined by the user

In sdk v1, the attributes input was a `*map[string]string`, so if it was
 not set, it would just be a No-Op

In sdk v2, attributes is `map[string]string`, so if it's not set, it would 
default to an empty map, which started causing issues

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Author: michaelhtm

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,13 +1,13 @@
 ack_generate_info:
-  build_date: "2025-11-29T03:36:21Z"
-  build_hash: 23c7074fa310ad1ccb38946775397c203b49f024
+  build_date: "2025-12-11T23:39:26Z"
+  build_hash: 5c8b9050006ef6c7d3a97c279e7b1bc163f20a0a
   go_version: go1.25.4
-  version: v0.56.0
+  version: v0.56.0-3-g5c8b905
 api_directory_checksum: 2627dc306e3a83c86c04050c6c4336451459e728
 api_version: v1alpha1
 aws_sdk_go_version: v1.32.6
 generator_config_info:
-  file_checksum: b332aeda9a33b58316273296754ee470b9568b59
+  file_checksum: 7d19f3bad5c4ff9efc3550284a2e9284212afb28
   original_file_name: generator.yaml
 last_modification:
   reason: API generation

apis/v1alpha1/generator.yaml

@@ -20,6 +20,8 @@ resources:
         template_path: hooks/queue/sdk_get_attributes_post_set_output.go.tpl
       sdk_update_pre_build_request:
         template_path: hooks/queue/sdk_update_pre_build_request.go.tpl
+      sdk_update_post_build_request:
+        template_path: hooks/queue/sdk_update_post_build_request.go.tpl
     print:
       add_age_column: true
       add_synced_column: true

generator.yaml

@@ -20,6 +20,8 @@ resources:
         template_path: hooks/queue/sdk_get_attributes_post_set_output.go.tpl
       sdk_update_pre_build_request:
         template_path: hooks/queue/sdk_update_pre_build_request.go.tpl
+      sdk_update_post_build_request:
+        template_path: hooks/queue/sdk_update_post_build_request.go.tpl
     print:
       add_age_column: true
       add_synced_column: true

helm/crds/services.k8s.aws_iamroleselectors.yaml

@@ -63,6 +63,16 @@ spec:
                 required:
                 - names
                 type: object
+              resourceLabelSelector:
+                description: LabelSelector is a label query over a set of resources.
+                properties:
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    type: object
+                required:
+                - matchLabels
+                type: object
               resourceTypeSelector:
                 items:
                   properties:

helm/templates/deployment.yaml

@@ -51,6 +51,13 @@ spec:
         - "$(AWS_REGION)"
         - --aws-endpoint-url
         - "$(AWS_ENDPOINT_URL)"
+{{- if .Values.aws.identity_endpoint_url }}
+        - --aws-identity-endpoint-url
+        - "$(AWS_IDENTITY_ENDPOINT_URL)"
+{{- end }}
+{{- if .Values.aws.allow_unsafe_aws_endpoint_urls }}
+        - --allow-unsafe-aws-endpoint-urls
+{{- end }}
 {{- if .Values.log.enable_development_logging }}
         - --enable-development-logging
 {{- end }}
@@ -109,6 +116,8 @@ spec:
           value: {{ .Values.aws.region }}
         - name: AWS_ENDPOINT_URL
           value: {{ .Values.aws.endpoint_url | quote }}
+        - name: AWS_IDENTITY_ENDPOINT_URL
+          value: {{ .Values.aws.identity_endpoint_url | quote }}
         - name: ACK_WATCH_NAMESPACE
           value: {{ include "ack-sqs-controller.watch-namespace" . }}
         - name: ACK_WATCH_SELECTORS

helm/values.schema.json

@@ -171,9 +171,16 @@
         "region": {
           "type": "string"
         },
-        "endpoint": {
+        "endpoint_url": {
           "type": "string"
         },
+        "identity_endpoint_url": {
+          "type": "string"
+        },
+        "allow_unsafe_aws_endpoint_urls": {
+          "type": "boolean",
+          "default": false
+        },
         "credentials": {
           "description": "AWS credentials information",
           "properties": {

helm/values.yaml

@@ -90,6 +90,8 @@ aws:
   # If specified, use the AWS region for AWS API calls
   region: ""
   endpoint_url: ""
+  identity_endpoint_url: ""
+  allow_unsafe_aws_endpoint_urls: false
   credentials:
     # If specified, Secret with shared credentials file to use.
     secretName: ""

pkg/resource/queue/sdk.go

@@ -0,0 +1,4 @@
+	// ignore updates if attributes are not defined.
+	if len(input.Attributes) == 0 {
+		return &resource{desired.ko.DeepCopy()}, nil
+	}