From 9d0eec141475cebb08819df9077343a280fbcdea Mon Sep 17 00:00:00 2001 From: Knative Automation Date: Tue, 6 Aug 2024 13:23:14 +0000 Subject: [PATCH] upgrade to latest dependencies bumping knative.dev/pkg 0e7ffe4...c88d5da: > c88d5da Bump github.com/tsenart/vegeta/v12 from 12.11.3 to 12.12.0 (# 3082) > cb30d00 Bump golang.org/x/sync from 0.7.0 to 0.8.0 (# 3081) > 433889b upgrade to latest dependencies (# 3080) bumping knative.dev/eventing d56d9ea...ff37e4e: > ff37e4e Sequence reconciler reads and watch the config-features configmap (# 8124) > a9abf3c [main] Upgrade to latest dependencies (# 8119) bumping knative.dev/hack 0a23232...441a19f: > 441a19f remove geo replication (# 389) bumping knative.dev/networking bab7f2a...f170238: > f170238 upgrade to latest dependencies (# 997) > 543181c upgrade to latest dependencies (# 996) > 2ffc30d Update community files (# 995) > 8f1ea9d upgrade to latest dependencies (# 994) bumping golang.org/x/sync 14be23e...411f99e: > 411f99e LICENSE: update per Google Legal bumping knative.dev/serving 9a7409c...73f88b2: > 73f88b2 Update net-istio nightly (# 15443) > 3ae5a0e Update net-kourier nightly (# 15446) > 0c4d290 upgrade to latest dependencies (# 15447) > 5376ae0 Update net-contour nightly (# 15445) > 1f480d0 Update net-gateway-api nightly (# 15444) > 97e9e8d upgrade to latest dependencies (# 15439) > 2b86c14 Add support for hostipc, hostpid and hostnetwork (# 15414) > cac5e63 Fix bug in cert manager config (# 15434) > 222065d Update net-kourier nightly (# 15429) > 57fa417 Update net-contour nightly (# 15430) > e740654 Update net-gateway-api nightly (# 15428) > 5225d4f Update net-istio nightly (# 15427) > 8c13034 upgrade to latest dependencies (# 15426) > 42bc7bb Update community files (# 15425) > 19b5e8c Update net-kourier nightly (# 15423) > 666897e Update net-contour nightly (# 15422) > dfa1726 Update net-gateway-api nightly (# 15421) Signed-off-by: Knative Automation --- go.mod | 12 ++++----- go.sum | 24 +++++++++--------- vendor/golang.org/x/sync/LICENSE | 4 +-- vendor/knative.dev/hack/release.sh | 25 ------------------- .../serving/pkg/apis/config/features.go | 10 ++++++++ .../serving/pkg/apis/serving/fieldmask.go | 13 +++++++--- vendor/modules.txt | 12 ++++----- 7 files changed, 45 insertions(+), 55 deletions(-) diff --git a/go.mod b/go.mod index 96f67ac32..635f17e24 100644 --- a/go.mod +++ b/go.mod @@ -14,10 +14,10 @@ require ( k8s.io/api v0.29.2 k8s.io/apimachinery v0.29.2 k8s.io/client-go v0.29.2 - knative.dev/eventing v0.42.1-0.20240730131016-d56d9ea1981f - knative.dev/hack v0.0.0-20240730131549-0a23232167bc - knative.dev/pkg v0.0.0-20240730131544-0e7ffe491d5e - knative.dev/serving v0.42.1-0.20240730120608-9a7409cfe07c + knative.dev/eventing v0.42.1-0.20240801183138-ff37e4e2fc0f + knative.dev/hack v0.0.0-20240801232131-441a19fc9ead + knative.dev/pkg v0.0.0-20240805063731-c88d5dad9653 + knative.dev/serving v0.42.1-0.20240806121737-73f88b255f5f ) require ( @@ -81,7 +81,7 @@ require ( golang.org/x/crypto v0.25.0 // indirect golang.org/x/mod v0.19.0 // indirect golang.org/x/net v0.27.0 // indirect - golang.org/x/sync v0.7.0 // indirect + golang.org/x/sync v0.8.0 // indirect golang.org/x/sys v0.22.0 // indirect golang.org/x/term v0.22.0 // indirect golang.org/x/text v0.16.0 // indirect @@ -103,7 +103,7 @@ require ( k8s.io/klog/v2 v2.120.1 // indirect k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 // indirect k8s.io/utils v0.0.0-20240102154912-e7106e64919e // indirect - knative.dev/networking v0.0.0-20240716111826-bab7f2a3e556 // indirect + knative.dev/networking v0.0.0-20240802083044-f1702380495f // indirect sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect sigs.k8s.io/yaml v1.4.0 // indirect diff --git a/go.sum b/go.sum index 74266f0db..4747a2be1 100644 --- a/go.sum +++ b/go.sum @@ -457,8 +457,8 @@ golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJ golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M= -golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ= +golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= @@ -723,16 +723,16 @@ k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 h1:aVUu9fTY98ivBPKR9Y5w/A k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00/go.mod h1:AsvuZPBlUDVuCdzJ87iajxtXuR9oktsTctW/R9wwouA= k8s.io/utils v0.0.0-20240102154912-e7106e64919e h1:eQ/4ljkx21sObifjzXwlPKpdGLrCfRziVtos3ofG/sQ= k8s.io/utils v0.0.0-20240102154912-e7106e64919e/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= -knative.dev/eventing v0.42.1-0.20240730131016-d56d9ea1981f h1:kGhsnoIXK/YW+wZ20k7DfJyqFLg083uFZZp51Lpd4uA= -knative.dev/eventing v0.42.1-0.20240730131016-d56d9ea1981f/go.mod h1:hW5BMYcihtCelT9pqaMtK8gmNOo1ybxcigjBY+/fU+k= -knative.dev/hack v0.0.0-20240730131549-0a23232167bc h1:Dl+DvyH7quVCP7FPNVii9Md+EuYgdsH43RFBp4jvMwc= -knative.dev/hack v0.0.0-20240730131549-0a23232167bc/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY= -knative.dev/networking v0.0.0-20240716111826-bab7f2a3e556 h1:9OTyJkrjiFh/burZiti3WucGv8Qtt91VJTnXfO5dC2g= -knative.dev/networking v0.0.0-20240716111826-bab7f2a3e556/go.mod h1:1PosUDkXqoHNzYxtLIwa7LFqSsIXBShHOseAb6XBeEU= -knative.dev/pkg v0.0.0-20240730131544-0e7ffe491d5e h1:pRbTdwG1ePdAJ+8mwFbtsY5gKFBaF+299QgY8BRn+ng= -knative.dev/pkg v0.0.0-20240730131544-0e7ffe491d5e/go.mod h1:wQoeURvX7/oMI5ZcNowGGIX4cmOUzew1cyNf3KRZdFE= -knative.dev/serving v0.42.1-0.20240730120608-9a7409cfe07c h1:au4tNcy2xIYrKt50L7IMW/bCdt+9lXw4C4B+JUYHklQ= -knative.dev/serving v0.42.1-0.20240730120608-9a7409cfe07c/go.mod h1:3FijTbV1GTO2O/G8WH/NDLVnK0xCi85V1+9kEbbLl/g= +knative.dev/eventing v0.42.1-0.20240801183138-ff37e4e2fc0f h1:nxcX0qPKzBc/n+gFEhT2sWTnT5xbRdx1QH8TPsXMxqM= +knative.dev/eventing v0.42.1-0.20240801183138-ff37e4e2fc0f/go.mod h1:sW8btFd57JF2hS2T92Jh/k1PgSOVTQdPzZODXaQs54E= +knative.dev/hack v0.0.0-20240801232131-441a19fc9ead h1:ViH1OEO0LViKa6W61YKUpLzOp7CJCFL9yLyIojHIuQ8= +knative.dev/hack v0.0.0-20240801232131-441a19fc9ead/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY= +knative.dev/networking v0.0.0-20240802083044-f1702380495f h1:1mIVNRZELhQLuDDFti6R26ZQXqeL2UkS/K0cMqKzBxw= +knative.dev/networking v0.0.0-20240802083044-f1702380495f/go.mod h1:FNWuEcSif270xzNwQx5xFvEsv7wKiKGPUKzpAXkajT8= +knative.dev/pkg v0.0.0-20240805063731-c88d5dad9653 h1:VHUW124ZpkDn4EnIzMuGWvGuJte3ISIoHMmEw2kx0zU= +knative.dev/pkg v0.0.0-20240805063731-c88d5dad9653/go.mod h1:H+5rS2GEWpAZzrmQoXOEVq/1M77LLMhR7+4jZBMOQ24= +knative.dev/serving v0.42.1-0.20240806121737-73f88b255f5f h1:yBlSzaLPKHuP0q/uhdrCPr7S99ZjrrqRpbnOrA6+3r0= +knative.dev/serving v0.42.1-0.20240806121737-73f88b255f5f/go.mod h1:gHq0Gm9DC2Kx4HwXFZKH4IcC9sXgoVln9AP93OYFujQ= rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8= rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0= rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= diff --git a/vendor/golang.org/x/sync/LICENSE b/vendor/golang.org/x/sync/LICENSE index 6a66aea5e..2a7cf70da 100644 --- a/vendor/golang.org/x/sync/LICENSE +++ b/vendor/golang.org/x/sync/LICENSE @@ -1,4 +1,4 @@ -Copyright (c) 2009 The Go Authors. All rights reserved. +Copyright 2009 The Go Authors. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are @@ -10,7 +10,7 @@ notice, this list of conditions and the following disclaimer. copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. - * Neither the name of Google Inc. nor the names of its + * Neither the name of Google LLC nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. diff --git a/vendor/knative.dev/hack/release.sh b/vendor/knative.dev/hack/release.sh index 7c5c2ba52..5cc8f3235 100644 --- a/vendor/knative.dev/hack/release.sh +++ b/vendor/knative.dev/hack/release.sh @@ -33,36 +33,12 @@ readonly RELEASE_GCR="gcr.io/knative-releases/github.com/${ORG_NAME}/${REPO_NAME readonly NIGHTLY_SIGNING_IDENTITY="signer@knative-nightly.iam.gserviceaccount.com" readonly RELEASE_SIGNING_IDENTITY="signer@knative-releases.iam.gserviceaccount.com" -# Georeplicate images to {us,eu,asia}.gcr.io -readonly GEO_REPLICATION=(us eu asia) - # Simple banner for logging purposes. # Parameters: $* - message to display. function banner() { subheader "$*" } -# Tag images in the yaml files if $TAG is not empty. -# $KO_DOCKER_REPO is the registry containing the images to tag with $TAG. -# Parameters: $1..$n - files to parse for images (non .yaml files are ignored). -function tag_images_in_yamls() { - [[ -z ${TAG} ]] && return 0 - local SRC_DIR="${GOPATH}/src/" - local DOCKER_BASE="${KO_DOCKER_REPO}/${REPO_ROOT_DIR/$SRC_DIR}" - local GEO_REGIONS="${GEO_REPLICATION[@]} " - echo "Tagging any images under '${DOCKER_BASE}' with ${TAG}" - # shellcheck disable=SC2068 - for file in $@; do - [[ "${file##*.}" != "yaml" ]] && continue - echo "Inspecting ${file}" - for image in $(grep -o "${DOCKER_BASE}/[a-z\./-]\+@sha256:[0-9a-f]\+" "${file}"); do - for region in "" ${GEO_REGIONS// /. }; do - gcloud -q container images add-tag "${image}" "${region}${image%%@*}:${TAG}" - done - done - done -} - # Copy the given files to the $RELEASE_GCS_BUCKET bucket's "latest" directory. # If $TAG is not empty, also copy them to $RELEASE_GCS_BUCKET bucket's "previous" directory. # Parameters: $1..$n - files to copy. @@ -646,7 +622,6 @@ function run_validation_tests() { # Parameters: $1..$n - files to add to the release. function publish_artifacts() { (( ! PUBLISH_RELEASE )) && return - tag_images_in_yamls "${ARTIFACTS_TO_PUBLISH}" if [[ -n "${RELEASE_DIR}" ]]; then cp "${ARTIFACTS_TO_PUBLISH}" "${RELEASE_DIR}" || abort "cannot copy release to '${RELEASE_DIR}'" fi diff --git a/vendor/knative.dev/serving/pkg/apis/config/features.go b/vendor/knative.dev/serving/pkg/apis/config/features.go index 63234c30e..57b0bbe49 100644 --- a/vendor/knative.dev/serving/pkg/apis/config/features.go +++ b/vendor/knative.dev/serving/pkg/apis/config/features.go @@ -64,6 +64,9 @@ func defaultFeaturesConfig() *Features { PodSpecRuntimeClassName: Disabled, PodSpecSecurityContext: Disabled, PodSpecShareProcessNamespace: Disabled, + PodSpecHostIPC: Disabled, + PodSpecHostPID: Disabled, + PodSpecHostNetwork: Disabled, PodSpecPriorityClassName: Disabled, PodSpecSchedulerName: Disabled, ContainerSpecAddCapabilities: Disabled, @@ -98,11 +101,15 @@ func NewFeaturesConfigFromMap(data map[string]string) (*Features, error) { asFlag("kubernetes.podspec-runtimeclassname", &nc.PodSpecRuntimeClassName), asFlag("kubernetes.podspec-securitycontext", &nc.PodSpecSecurityContext), asFlag("kubernetes.podspec-shareprocessnamespace", &nc.PodSpecShareProcessNamespace), + asFlag("kubernetes.podspec-hostipc", &nc.PodSpecHostIPC), asFlag("kubernetes.podspec-priorityclassname", &nc.PodSpecPriorityClassName), asFlag("kubernetes.podspec-schedulername", &nc.PodSpecSchedulerName), asFlag("kubernetes.containerspec-addcapabilities", &nc.ContainerSpecAddCapabilities), asFlag("kubernetes.podspec-tolerations", &nc.PodSpecTolerations), asFlag("kubernetes.podspec-volumes-emptydir", &nc.PodSpecVolumesEmptyDir), + asFlag("kubernetes.podspec-hostipc", &nc.PodSpecHostIPC), + asFlag("kubernetes.podspec-hostpid", &nc.PodSpecHostPID), + asFlag("kubernetes.podspec-hostnetwork", &nc.PodSpecHostNetwork), asFlag("kubernetes.podspec-init-containers", &nc.PodSpecInitContainers), asFlag("kubernetes.podspec-persistent-volume-claim", &nc.PodSpecPersistentVolumeClaim), asFlag("kubernetes.podspec-persistent-volume-write", &nc.PodSpecPersistentVolumeWrite), @@ -136,6 +143,9 @@ type Features struct { PodSpecRuntimeClassName Flag PodSpecSecurityContext Flag PodSpecShareProcessNamespace Flag + PodSpecHostIPC Flag + PodSpecHostPID Flag + PodSpecHostNetwork Flag PodSpecPriorityClassName Flag PodSpecSchedulerName Flag ContainerSpecAddCapabilities Flag diff --git a/vendor/knative.dev/serving/pkg/apis/serving/fieldmask.go b/vendor/knative.dev/serving/pkg/apis/serving/fieldmask.go index b9b3876bb..faff5dba9 100644 --- a/vendor/knative.dev/serving/pkg/apis/serving/fieldmask.go +++ b/vendor/knative.dev/serving/pkg/apis/serving/fieldmask.go @@ -263,16 +263,21 @@ func PodSpecMask(ctx context.Context, in *corev1.PodSpec) *corev1.PodSpec { if cfg.Features.PodSpecDNSConfig != config.Disabled { out.DNSConfig = in.DNSConfig } - + if cfg.Features.PodSpecHostIPC != config.Disabled { + out.HostIPC = in.HostIPC + } + if cfg.Features.PodSpecHostPID != config.Disabled { + out.HostPID = in.HostPID + } + if cfg.Features.PodSpecHostNetwork != config.Disabled { + out.HostNetwork = in.HostNetwork + } // Disallowed fields // This list is unnecessary, but added here for clarity out.RestartPolicy = "" out.TerminationGracePeriodSeconds = nil out.ActiveDeadlineSeconds = nil out.NodeName = "" - out.HostNetwork = false - out.HostPID = false - out.HostIPC = false out.Hostname = "" out.Subdomain = "" out.Priority = nil diff --git a/vendor/modules.txt b/vendor/modules.txt index 5c0ea78c6..a6b45b168 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -310,7 +310,7 @@ golang.org/x/net/trace ## explicit; go 1.18 golang.org/x/oauth2 golang.org/x/oauth2/internal -# golang.org/x/sync v0.7.0 +# golang.org/x/sync v0.8.0 ## explicit; go 1.18 golang.org/x/sync/errgroup golang.org/x/sync/semaphore @@ -969,7 +969,7 @@ k8s.io/utils/pointer k8s.io/utils/ptr k8s.io/utils/strings/slices k8s.io/utils/trace -# knative.dev/eventing v0.42.1-0.20240730131016-d56d9ea1981f +# knative.dev/eventing v0.42.1-0.20240801183138-ff37e4e2fc0f ## explicit; go 1.22 knative.dev/eventing/pkg/adapter/v2 knative.dev/eventing/pkg/adapter/v2/test @@ -1057,15 +1057,15 @@ knative.dev/eventing/pkg/metrics knative.dev/eventing/pkg/metrics/source knative.dev/eventing/pkg/observability knative.dev/eventing/pkg/observability/client -# knative.dev/hack v0.0.0-20240730131549-0a23232167bc +# knative.dev/hack v0.0.0-20240801232131-441a19fc9ead ## explicit; go 1.21 knative.dev/hack -# knative.dev/networking v0.0.0-20240716111826-bab7f2a3e556 +# knative.dev/networking v0.0.0-20240802083044-f1702380495f ## explicit; go 1.22 knative.dev/networking/pkg/apis/networking knative.dev/networking/pkg/apis/networking/v1alpha1 knative.dev/networking/pkg/config -# knative.dev/pkg v0.0.0-20240730131544-0e7ffe491d5e +# knative.dev/pkg v0.0.0-20240805063731-c88d5dad9653 ## explicit; go 1.22 knative.dev/pkg/apis knative.dev/pkg/apis/duck @@ -1130,7 +1130,7 @@ knative.dev/pkg/webhook/psbinding knative.dev/pkg/webhook/resourcesemantics knative.dev/pkg/webhook/resourcesemantics/defaulting knative.dev/pkg/webhook/resourcesemantics/validation -# knative.dev/serving v0.42.1-0.20240730120608-9a7409cfe07c +# knative.dev/serving v0.42.1-0.20240806121737-73f88b255f5f ## explicit; go 1.22 knative.dev/serving/pkg/apis/autoscaling knative.dev/serving/pkg/apis/autoscaling/v1alpha1