diff --git a/go.mod b/go.mod index e3183a2fb..612a287fc 100644 --- a/go.mod +++ b/go.mod @@ -20,12 +20,12 @@ require ( k8s.io/apimachinery v0.30.3 k8s.io/client-go v0.30.3 k8s.io/code-generator v0.30.3 - knative.dev/caching v0.0.0-20241128013742-9f3a58ce332c - knative.dev/eventing v0.43.1-0.20241217130309-b00da5954263 - knative.dev/hack v0.0.0-20241128013751-1978b3a02667 - knative.dev/pkg v0.0.0-20241218051509-40afb7c5436e - knative.dev/reconciler-test v0.0.0-20241128013747-984ae1257c23 - knative.dev/serving v0.43.1-0.20241217181709-d1e308e65f09 + knative.dev/caching v0.0.0-20241228165110-98070c283d73 + knative.dev/eventing v0.43.1-0.20241223131119-c9047a198255 + knative.dev/hack v0.0.0-20241227080210-e92a16ae0893 + knative.dev/pkg v0.0.0-20241223131119-4c901591eb4a + knative.dev/reconciler-test v0.0.0-20241223131247-96258bea6ce4 + knative.dev/serving v0.43.1-0.20241230225749-df030277a7be sigs.k8s.io/yaml v1.4.0 ) @@ -154,7 +154,7 @@ require ( k8s.io/klog/v2 v2.130.1 // indirect k8s.io/kube-openapi v0.0.0-20240808142205-8e686545bdb8 // indirect k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 // indirect - knative.dev/networking v0.0.0-20241118075147-929a5d5f19d0 // indirect + knative.dev/networking v0.0.0-20241213084654-8b69a35edbf3 // indirect sigs.k8s.io/controller-runtime v0.7.2 // indirect sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect diff --git a/go.sum b/go.sum index 931436942..bb99a3fad 100644 --- a/go.sum +++ b/go.sum @@ -1391,20 +1391,20 @@ k8s.io/utils v0.0.0-20200912215256-4140de9c8800/go.mod h1:jPW/WVKK9YHAvNhRxK0md/ k8s.io/utils v0.0.0-20210819203725-bdf08cb9a70a/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA= k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 h1:pUdcCO1Lk/tbT5ztQWOBi5HBgbBP1J8+AsQnQCKsi8A= k8s.io/utils v0.0.0-20240711033017-18e509b52bc8/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= -knative.dev/caching v0.0.0-20241128013742-9f3a58ce332c h1:NND36MXXBff0As80pG1uOrO8iBg9k0jdrKrRWT4NVy0= -knative.dev/caching v0.0.0-20241128013742-9f3a58ce332c/go.mod h1:xcxIBx5jKR4HANCbcN4If+uNU1Y76b/tn9eV1byvJKc= -knative.dev/eventing v0.43.1-0.20241217130309-b00da5954263 h1:BS5DC4bl8XfrkJ9GtRVcud2B/8zuu8a5uhB8j0YCq4g= -knative.dev/eventing v0.43.1-0.20241217130309-b00da5954263/go.mod h1:ua8Gzlsh4W7oDNNGqvTVN3dlmSpP2qHfZdPu9wSO9So= -knative.dev/hack v0.0.0-20241128013751-1978b3a02667 h1:cp3GfEBnL0H2OrqdxLZ7nZ2K7U4PMdQhdBogl4Vd5+E= -knative.dev/hack v0.0.0-20241128013751-1978b3a02667/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY= -knative.dev/networking v0.0.0-20241118075147-929a5d5f19d0 h1:3vj6wR95isnuqgjQzcclyrzaodv5Jvjc7xq4Bv0yde8= -knative.dev/networking v0.0.0-20241118075147-929a5d5f19d0/go.mod h1:VvJGbKdlbEG6xr8q2LMLpiUlIt8OUiJZBRlT9yUq09w= -knative.dev/pkg v0.0.0-20241218051509-40afb7c5436e h1:pgdDEZT3R50XHwbHBYUYTb71PQ1oDR/2m3mRyQ57W8w= -knative.dev/pkg v0.0.0-20241218051509-40afb7c5436e/go.mod h1:C2dxK66GlycMOS0SKqv0SMAnWkxsYbG4hkH32Xg1qD0= -knative.dev/reconciler-test v0.0.0-20241128013747-984ae1257c23 h1:uImxV6MAs6JEahOHfemXSq7fgWNQ5ZW1BtFPDlanEc4= -knative.dev/reconciler-test v0.0.0-20241128013747-984ae1257c23/go.mod h1:zDapuiJIFS67XEVBJWdEnVN5KHE8EvFGooLQGXeDH/c= -knative.dev/serving v0.43.1-0.20241217181709-d1e308e65f09 h1:zSQWnSXcjiyUrsURFedT6KhUPwkN4wLHhZGL1isS+cw= -knative.dev/serving v0.43.1-0.20241217181709-d1e308e65f09/go.mod h1:O39Rmsexjtgrqx2MwzH7cbOl+EP2Da9v+HHuh0N4uIs= +knative.dev/caching v0.0.0-20241228165110-98070c283d73 h1:R9ourCbtO+twCxnG/k8wSlt6RTsPBvCginNYsV6QGFI= +knative.dev/caching v0.0.0-20241228165110-98070c283d73/go.mod h1:XifurIHfoPIJocfQJtDJm4st9QPOhjpXprVgp/uSU8o= +knative.dev/eventing v0.43.1-0.20241223131119-c9047a198255 h1:pgj6ZnPAklWTTeef9d35/avLBb2rREX7Y5+BwZp6W0I= +knative.dev/eventing v0.43.1-0.20241223131119-c9047a198255/go.mod h1:eBhIxUaRBUAJUQ98189X+KBps/UoWJY4B/MZk+FiVIM= +knative.dev/hack v0.0.0-20241227080210-e92a16ae0893 h1:zy7LwNJ2S7obPMHVAtxQgZPXxBTZzoxHbtb6uhxOl7Q= +knative.dev/hack v0.0.0-20241227080210-e92a16ae0893/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY= +knative.dev/networking v0.0.0-20241213084654-8b69a35edbf3 h1:nJzte4HE7qkVQ/AEWDgFm+3yOWuRjGcaRacmlD2vu9I= +knative.dev/networking v0.0.0-20241213084654-8b69a35edbf3/go.mod h1:nhaf+dGDhLRg0ez4Bm8aX79LD3ohZlSCgsGdu5TbRHU= +knative.dev/pkg v0.0.0-20241223131119-4c901591eb4a h1:31rLKAGHeQEkxMOc/h4XCmHOTiR/1R4NRPvJ3wg05WY= +knative.dev/pkg v0.0.0-20241223131119-4c901591eb4a/go.mod h1:C2dxK66GlycMOS0SKqv0SMAnWkxsYbG4hkH32Xg1qD0= +knative.dev/reconciler-test v0.0.0-20241223131247-96258bea6ce4 h1:6t8hbwR0tHc1AzUExhLrc7SWVmN4e9mdXkHAC38Y/h0= +knative.dev/reconciler-test v0.0.0-20241223131247-96258bea6ce4/go.mod h1:zDapuiJIFS67XEVBJWdEnVN5KHE8EvFGooLQGXeDH/c= +knative.dev/serving v0.43.1-0.20241230225749-df030277a7be h1:SXCce1/7konpjPpKU15RzzzZnjjz1rmmGO3OUeHjSro= +knative.dev/serving v0.43.1-0.20241230225749-df030277a7be/go.mod h1:t4ry8crQ2u732iZdr6nBcOfx9ulNc1uyfS2TeALLOKM= nhooyr.io/websocket v1.8.6/go.mod h1:B70DZP8IakI65RVQ51MsWP/8jndNma26DVA/nFSCgW0= pgregory.net/rapid v1.1.0 h1:CMa0sjHSru3puNx+J0MIAuiiEV4N0qj8/cMWGBBCsjw= pgregory.net/rapid v1.1.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04= diff --git a/vendor/knative.dev/hack/infra-library.sh b/vendor/knative.dev/hack/infra-library.sh index 83eacfa66..ba5b18180 100644 --- a/vendor/knative.dev/hack/infra-library.sh +++ b/vendor/knative.dev/hack/infra-library.sh @@ -21,7 +21,7 @@ source "$(dirname "${BASH_SOURCE[0]:-$0}")/library.sh" # Default Kubernetes version to use for GKE, if not overridden with # the `--cluster-version` parameter. -readonly GKE_DEFAULT_CLUSTER_VERSION="1.28" +readonly GKE_DEFAULT_CLUSTER_VERSION="1.30" # Dumps the k8s api server metrics. Spins up a proxy, waits a little bit and # dumps the metrics to ${ARTIFACTS}/k8s.metrics.txt diff --git a/vendor/knative.dev/serving/pkg/apis/serving/fieldmask.go b/vendor/knative.dev/serving/pkg/apis/serving/fieldmask.go index faff5dba9..ab859740d 100644 --- a/vendor/knative.dev/serving/pkg/apis/serving/fieldmask.go +++ b/vendor/knative.dev/serving/pkg/apis/serving/fieldmask.go @@ -710,10 +710,12 @@ func SecurityContextMask(ctx context.Context, in *corev1.SecurityContext) *corev // SeccompProfile defaults to "unconstrained", but the safe values are // "RuntimeDefault" or "Localhost" (with localhost path set) out.SeccompProfile = in.SeccompProfile - + // Only allow setting Privileged to false + if in.Privileged != nil && !*in.Privileged { + out.Privileged = in.Privileged + } // Disallowed // This list is unnecessary, but added here for clarity - out.Privileged = nil out.SELinuxOptions = nil out.ProcMount = nil diff --git a/vendor/knative.dev/serving/test/e2e-external-domain-tls-tests.sh b/vendor/knative.dev/serving/test/e2e-external-domain-tls-tests.sh index 33c86a084..71ff537bd 100644 --- a/vendor/knative.dev/serving/test/e2e-external-domain-tls-tests.sh +++ b/vendor/knative.dev/serving/test/e2e-external-domain-tls-tests.sh @@ -162,7 +162,7 @@ function delete_dns_record() { } # Script entry point. -initialize "$@" --num-nodes=4 --enable-ha --cluster-version=1.28 +initialize "$@" --num-nodes=4 --enable-ha --cluster-version=1.30 # Run the tests header "Running tests" diff --git a/vendor/knative.dev/serving/test/e2e-tests.sh b/vendor/knative.dev/serving/test/e2e-tests.sh index 109e71e0e..eae5c5c7d 100644 --- a/vendor/knative.dev/serving/test/e2e-tests.sh +++ b/vendor/knative.dev/serving/test/e2e-tests.sh @@ -28,7 +28,7 @@ source $(dirname "$0")/e2e-common.sh # Script entry point. -initialize --num-nodes=4 --enable-ha --cluster-version=1.28 "$@" +initialize --num-nodes=4 --enable-ha --cluster-version=1.30 "$@" # Run the tests header "Running tests" diff --git a/vendor/knative.dev/serving/test/e2e-upgrade-tests.sh b/vendor/knative.dev/serving/test/e2e-upgrade-tests.sh index e15ea761c..6c31fab1a 100644 --- a/vendor/knative.dev/serving/test/e2e-upgrade-tests.sh +++ b/vendor/knative.dev/serving/test/e2e-upgrade-tests.sh @@ -42,7 +42,7 @@ function stage_test_resources() { # Skip installing istio as an add-on. # Skip installing a pvc as it is not used in upgrade tests # Skip installing a resource quota as it is not used in upgrade tests -PVC=0 QUOTA=0 initialize "$@" --num-nodes=4 --cluster-version=1.28 \ +PVC=0 QUOTA=0 initialize "$@" --num-nodes=4 --cluster-version=1.30 \ --install-latest-release # TODO(#2656): Reduce the timeout after we get this test to consistently passing. diff --git a/vendor/modules.txt b/vendor/modules.txt index a0683510e..b8c92b3ef 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -1364,11 +1364,11 @@ k8s.io/utils/pointer k8s.io/utils/ptr k8s.io/utils/strings/slices k8s.io/utils/trace -# knative.dev/caching v0.0.0-20241128013742-9f3a58ce332c +# knative.dev/caching v0.0.0-20241228165110-98070c283d73 ## explicit; go 1.22.7 knative.dev/caching/pkg/apis/caching knative.dev/caching/pkg/apis/caching/v1alpha1 -# knative.dev/eventing v0.43.1-0.20241217130309-b00da5954263 +# knative.dev/eventing v0.43.1-0.20241223131119-c9047a198255 ## explicit; go 1.22.7 knative.dev/eventing/cmd/heartbeats knative.dev/eventing/pkg/apis @@ -1458,10 +1458,10 @@ knative.dev/eventing/test/upgrade/prober/wathola/fetcher knative.dev/eventing/test/upgrade/prober/wathola/forwarder knative.dev/eventing/test/upgrade/prober/wathola/receiver knative.dev/eventing/test/upgrade/prober/wathola/sender -# knative.dev/hack v0.0.0-20241128013751-1978b3a02667 +# knative.dev/hack v0.0.0-20241227080210-e92a16ae0893 ## explicit; go 1.21 knative.dev/hack -# knative.dev/networking v0.0.0-20241118075147-929a5d5f19d0 +# knative.dev/networking v0.0.0-20241213084654-8b69a35edbf3 ## explicit; go 1.22.7 knative.dev/networking/pkg knative.dev/networking/pkg/apis/networking @@ -1478,7 +1478,7 @@ knative.dev/networking/pkg/http/proxy knative.dev/networking/pkg/http/stats knative.dev/networking/pkg/ingress knative.dev/networking/pkg/k8s -# knative.dev/pkg v0.0.0-20241218051509-40afb7c5436e +# knative.dev/pkg v0.0.0-20241223131119-4c901591eb4a ## explicit; go 1.22.7 knative.dev/pkg/apiextensions/storageversion knative.dev/pkg/apiextensions/storageversion/cmd/migrate @@ -1558,7 +1558,7 @@ knative.dev/pkg/webhook knative.dev/pkg/webhook/certificates knative.dev/pkg/webhook/certificates/resources knative.dev/pkg/webhook/resourcesemantics/conversion -# knative.dev/reconciler-test v0.0.0-20241128013747-984ae1257c23 +# knative.dev/reconciler-test v0.0.0-20241223131247-96258bea6ce4 ## explicit; go 1.22.7 knative.dev/reconciler-test/cmd/eventshub knative.dev/reconciler-test/pkg/environment @@ -1587,7 +1587,7 @@ knative.dev/reconciler-test/pkg/resources/service knative.dev/reconciler-test/pkg/resources/serviceaccount knative.dev/reconciler-test/pkg/state knative.dev/reconciler-test/resources/certificate -# knative.dev/serving v0.43.1-0.20241217181709-d1e308e65f09 +# knative.dev/serving v0.43.1-0.20241230225749-df030277a7be ## explicit; go 1.22.7 knative.dev/serving/pkg/apis/autoscaling knative.dev/serving/pkg/apis/autoscaling/v1alpha1