From 0680c81b43c2caae6ca5edd21213dfde4b77efd9 Mon Sep 17 00:00:00 2001 From: Knative Automation Date: Thu, 12 Oct 2023 08:29:18 -0400 Subject: [PATCH] upgrade to latest dependencies (#1879) bumping knative.dev/networking 75dcd54...a595805: > a595805 Run ./hack/update-deps.sh --upgrade --release 1.11 (# 878) bumping knative.dev/eventing 248a471...6a695cb: > 6a695cb [release-1.11] Adding description for the built-in event types of our duck sources (# 7276) > 479724b [release-1.11] Option to specify different namespace for resources (# 7270) > 1e8614d [release-1.11] Added hostnames to tls certificates (# 7259) > e3ba93b Fixed eventtype create-delete loop on built in sources (# 7245) (# 7250) > cf0f9d5 [release-1.11] Autoscaler considers reserved and pending replicas (# 7216) > 3ccfc1c [release-v1.11] Cherry pick eventtype autocreate fixes (# 7201) > 1a5f37c [release-1.11] Global resync brokers on config-features changes (# 7134) > d3a0faa [release-1.11] Watch config-features in IMC controller (# 7133) > fee0553 [release-1.11] Upgrade to latest dependencies (# 7132) > cf146f1 [release-1.11] Fix edit role aggregation (# 7128) bumping knative.dev/serving f1617ef...f60eb32: > f60eb32 [release-1.11] fix securityContext for Knative Service Pod (user-container and queue-proxy) (# 14378) bumping knative.dev/pkg aef227e...bd99f2f: > bd99f2f Bumped x/net to v0.17.0 to fix cve-2023-44487 on release-1.11 (# 2860) Signed-off-by: Knative Automation --- go.mod | 8 ++++---- go.sum | 16 ++++++++-------- .../pkg/apis/serving/v1/revision_defaults.go | 4 ++++ vendor/modules.txt | 8 ++++---- 4 files changed, 20 insertions(+), 16 deletions(-) diff --git a/go.mod b/go.mod index 31617133a..acd17dc8e 100644 --- a/go.mod +++ b/go.mod @@ -21,11 +21,11 @@ require ( k8s.io/client-go v0.26.5 k8s.io/code-generator v0.26.5 knative.dev/client-pkg v0.0.0-20230726202841-bd83cf476909 - knative.dev/eventing v0.38.0 + knative.dev/eventing v0.38.4 knative.dev/hack v0.0.0-20230712131415-ddae80293c43 - knative.dev/networking v0.0.0-20230718160410-75dcd54d9510 - knative.dev/pkg v0.0.0-20230718152110-aef227e72ead - knative.dev/serving v0.38.0 + knative.dev/networking v0.0.0-20231012062757-a5958051caf8 + knative.dev/pkg v0.0.0-20231011193800-bd99f2f98be7 + knative.dev/serving v0.38.1 sigs.k8s.io/yaml v1.3.0 ) diff --git a/go.sum b/go.sum index 86299c13b..841234595 100644 --- a/go.sum +++ b/go.sum @@ -901,16 +901,16 @@ k8s.io/utils v0.0.0-20221108210102-8e77b1f39fe2 h1:GfD9OzL11kvZN5iArC6oTS7RTj7oJ k8s.io/utils v0.0.0-20221108210102-8e77b1f39fe2/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= knative.dev/client-pkg v0.0.0-20230726202841-bd83cf476909 h1:tn75M7CVM0eSg4nH0yxA0tqA/g9O7pT1518mZS3VCFI= knative.dev/client-pkg v0.0.0-20230726202841-bd83cf476909/go.mod h1:TuCXbcV3spDkZ3nGefq83OuLaICpfVpRJpegmYH9FfE= -knative.dev/eventing v0.38.0 h1:n6/k9IJ1kOvpZx4CMLqa1FG7g2iBiyKXwBu1Fy/81q4= -knative.dev/eventing v0.38.0/go.mod h1:JUqEC0zoyfYqhRHFz8VUxjkxH9G1cQ/Y+UvhXTxUXgI= +knative.dev/eventing v0.38.4 h1:eH059bfeLilj2xAN6V7XXOh3wqzz5ssoMS/CIJpJfmk= +knative.dev/eventing v0.38.4/go.mod h1:ct8t+v6nmp1kFCy6ngkDWIEvnjJDNDoKptrfnQVh+z8= knative.dev/hack v0.0.0-20230712131415-ddae80293c43 h1:3SE06uNfSFGm/5XS+0trbyCUpgsOaBeyhPQU8FPNFz8= knative.dev/hack v0.0.0-20230712131415-ddae80293c43/go.mod h1:yk2OjGDsbEnQjfxdm0/HJKS2WqTLEFg/N6nUs6Rqx3Q= -knative.dev/networking v0.0.0-20230718160410-75dcd54d9510 h1:eNbWjEkbtGjCqK5TB4S0CjSSDd4PvyXm+w7bM9/zce4= -knative.dev/networking v0.0.0-20230718160410-75dcd54d9510/go.mod h1:Vngl91M++hqgoGNIjCii7MXnsEeN3kRbGC1aodhFqbk= -knative.dev/pkg v0.0.0-20230718152110-aef227e72ead h1:2dDzorpKuVZW3Qp7TbirMMq16FbId8f6bacQFX8jXLw= -knative.dev/pkg v0.0.0-20230718152110-aef227e72ead/go.mod h1:WmrwRV/P+hGHoMraAEfwg6ec+fBTf+Obu41v354Iabc= -knative.dev/serving v0.38.0 h1:h2PLGbhXmE1P2jB5ozjnXT6CagadMykaJW4Q/dhv0os= -knative.dev/serving v0.38.0/go.mod h1:3/KPMVdVOZSHdrRhvelLuxuO+Ftln2ZTKq8R3gUu6Gw= +knative.dev/networking v0.0.0-20231012062757-a5958051caf8 h1:oZMbAAXyiDZUYoQ4qEjL6uxXrL1xBVfEyQJx8sP0XEg= +knative.dev/networking v0.0.0-20231012062757-a5958051caf8/go.mod h1:XwZwqJoLZR92N6F/sj8lHxttnry/Kiz+OgG8+uVuYn0= +knative.dev/pkg v0.0.0-20231011193800-bd99f2f98be7 h1:y3qbfYX1SuSr/1ysXvKfpV8q/kCwWLWieCUgAhBUHmQ= +knative.dev/pkg v0.0.0-20231011193800-bd99f2f98be7/go.mod h1:g+UCgSKQ2f15kHYu/V3CPtoKo5F1x/2Y1ot0NSK7gA0= +knative.dev/serving v0.38.1 h1:ALKyyKA1Xf083Es2SOE8HeCy/vFhFWE6TcHNxurDf5k= +knative.dev/serving v0.38.1/go.mod h1:3/KPMVdVOZSHdrRhvelLuxuO+Ftln2ZTKq8R3gUu6Gw= rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8= rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0= rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= diff --git a/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go b/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go index 8acbf3446..4805f5b1f 100644 --- a/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go +++ b/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go @@ -208,6 +208,10 @@ func (rs *RevisionSpec) defaultSecurityContext(psc *corev1.PodSecurityContext, c } } + if psc.RunAsNonRoot == nil { + updatedSC.RunAsNonRoot = ptr.Bool(true) + } + if *updatedSC != (corev1.SecurityContext{}) { container.SecurityContext = updatedSC } diff --git a/vendor/modules.txt b/vendor/modules.txt index e9f37b154..bb1868713 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -940,7 +940,7 @@ k8s.io/utils/trace # knative.dev/client-pkg v0.0.0-20230726202841-bd83cf476909 ## explicit; go 1.18 knative.dev/client-pkg/pkg/kn/plugin -# knative.dev/eventing v0.38.0 +# knative.dev/eventing v0.38.4 ## explicit; go 1.19 knative.dev/eventing/pkg/apis/config knative.dev/eventing/pkg/apis/duck @@ -972,7 +972,7 @@ knative.dev/eventing/pkg/client/clientset/versioned/typed/sources/v1beta2/fake # knative.dev/hack v0.0.0-20230712131415-ddae80293c43 ## explicit; go 1.18 knative.dev/hack -# knative.dev/networking v0.0.0-20230718160410-75dcd54d9510 +# knative.dev/networking v0.0.0-20231012062757-a5958051caf8 ## explicit; go 1.18 knative.dev/networking/pkg knative.dev/networking/pkg/apis/networking @@ -987,7 +987,7 @@ knative.dev/networking/pkg/http/probe knative.dev/networking/pkg/http/proxy knative.dev/networking/pkg/http/stats knative.dev/networking/pkg/k8s -# knative.dev/pkg v0.0.0-20230718152110-aef227e72ead +# knative.dev/pkg v0.0.0-20231011193800-bd99f2f98be7 ## explicit; go 1.18 knative.dev/pkg/apis knative.dev/pkg/apis/duck @@ -1037,7 +1037,7 @@ knative.dev/pkg/tracing/config knative.dev/pkg/tracing/propagation knative.dev/pkg/tracing/propagation/tracecontextb3 knative.dev/pkg/tracker -# knative.dev/serving v0.38.0 +# knative.dev/serving v0.38.1 ## explicit; go 1.18 knative.dev/serving/pkg/apis/autoscaling knative.dev/serving/pkg/apis/autoscaling/v1alpha1