From 99909a5dad668aac892acd5da25239808d81f4bf Mon Sep 17 00:00:00 2001 From: Knative Automation Date: Thu, 12 Oct 2023 11:02:33 +0000 Subject: [PATCH] upgrade to latest dependencies bumping knative.dev/eventing 034bec9...7de3ecc: > 7de3ecc [release-1.10] Upgrade to latest dependencies (# 7144) > 1b3281e [release-1.10] Fix edit role aggregation (# 7129) > a4373f9 [release-1.10] Upgrade to latest dependencies (# 7122) > 76982bf [release-1.10] Function CopySecretWithName for creating secrets with specific name (# 7094) > e9544dd [release-1.10] Upgrade to latest dependencies (# 6976) > a0537ac [release-1.10] Use random names in Channel tests (# 6972) bumping knative.dev/pkg dfad48e...df28fea: > df28fea Bumped x/net to v0.17.0 to fix cve-2023-44487 on release-1.10 (# 2862) bumping knative.dev/networking e5d04e8...0b0f210: > 0b0f210 [release-1.10] bump x/net to v0.17 (# 879) bumping knative.dev/serving 2c1bb07...60754c3: > 60754c3 [release-1.10] fix securityContext for Knative Service Pod (user-container and queue-proxy) (# 14377) > 500756c [release-1.10] RandomChoice 2 policy wasn't random when the number of targets is 2 (with equal weight) (# 14052) > cdac06e drop safe to evict annotations (# 14051) > fc055b1 Min TLS for tag to digest defaults to 1.2 again and is configurable (# 13963) Signed-off-by: Knative Automation --- go.mod | 8 ++++---- go.sum | 16 ++++++++-------- .../pkg/apis/serving/v1/revision_defaults.go | 4 ++++ vendor/modules.txt | 8 ++++---- 4 files changed, 20 insertions(+), 16 deletions(-) diff --git a/go.mod b/go.mod index c68ba2bdb5..57d8814719 100644 --- a/go.mod +++ b/go.mod @@ -20,11 +20,11 @@ require ( k8s.io/cli-runtime v0.25.2 k8s.io/client-go v0.25.4 k8s.io/code-generator v0.25.4 - knative.dev/eventing v0.37.0 + knative.dev/eventing v0.37.3 knative.dev/hack v0.0.0-20230417170854-f591fea109b3 - knative.dev/networking v0.0.0-20230419144338-e5d04e805e50 - knative.dev/pkg v0.0.0-20230418073056-dfad48eaa5d0 - knative.dev/serving v0.37.0 + knative.dev/networking v0.0.0-20231012063223-0b0f2107abef + knative.dev/pkg v0.0.0-20231011201526-df28feae6d34 + knative.dev/serving v0.37.3 sigs.k8s.io/yaml v1.3.0 ) diff --git a/go.sum b/go.sum index 71e4a4843f..1388564a59 100644 --- a/go.sum +++ b/go.sum @@ -1087,16 +1087,16 @@ k8s.io/kube-openapi v0.0.0-20221012153701-172d655c2280 h1:+70TFaan3hfJzs+7VK2o+O k8s.io/kube-openapi v0.0.0-20221012153701-172d655c2280/go.mod h1:+Axhij7bCpeqhklhUTe3xmOn6bWxolyZEeyaFpjGtl4= k8s.io/utils v0.0.0-20221108210102-8e77b1f39fe2 h1:GfD9OzL11kvZN5iArC6oTS7RTj7oJOIfnislxYlqTj8= k8s.io/utils v0.0.0-20221108210102-8e77b1f39fe2/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= -knative.dev/eventing v0.37.0 h1:OtX8B9nvUSTNcbbpoNFDyeGaGU/5+aetj94i6oATpQU= -knative.dev/eventing v0.37.0/go.mod h1:62baPXiw5GPpPyV3f0GF64X7tOjc5x9cg64RAh1gjs4= +knative.dev/eventing v0.37.3 h1:TFJS/bcWJbcY4YvGg+LNEm0qdmeaMAHdUGHKuOmnX9E= +knative.dev/eventing v0.37.3/go.mod h1:DFZEmPkisDkr3jbTQd6mK+Dno3k9yacSgbkJGIDWg3c= knative.dev/hack v0.0.0-20230417170854-f591fea109b3 h1:+W4WBOq83tfGXKhtv8OB/uJeYqze3zh69GKiz1ucuqk= knative.dev/hack v0.0.0-20230417170854-f591fea109b3/go.mod h1:yk2OjGDsbEnQjfxdm0/HJKS2WqTLEFg/N6nUs6Rqx3Q= -knative.dev/networking v0.0.0-20230419144338-e5d04e805e50 h1:X9rPBYr7Vrm075q0iXTr7/0oklkYoyqvlnrUwNzcUhI= -knative.dev/networking v0.0.0-20230419144338-e5d04e805e50/go.mod h1:o2MyGpGfU5DoSAWCE2f/jnSC9GjGOplCslbA99yDkGo= -knative.dev/pkg v0.0.0-20230418073056-dfad48eaa5d0 h1:EFQcoUo8I4bc+U3y6tR1B3ONYZSHWUdAfI7Vh7dae8g= -knative.dev/pkg v0.0.0-20230418073056-dfad48eaa5d0/go.mod h1:2qWPP9Gjh9Q7ETti+WRHnBnGCSCq+6q7m3p/nmUQviE= -knative.dev/serving v0.37.0 h1:hp/HconGRzv0kh2az9I/af1K1DY3NG3zcyiVc2rHyOk= -knative.dev/serving v0.37.0/go.mod h1:v0Xbfp7olb0Gljm5l4qNuLsIf8/2p1rIt/mphxvx1z0= +knative.dev/networking v0.0.0-20231012063223-0b0f2107abef h1:FSEKaGc2ztb65VPn4EiTsjAFsmmHlYHUq+j+CCPlDtU= +knative.dev/networking v0.0.0-20231012063223-0b0f2107abef/go.mod h1:rMVkShVT/14rtscYC4ZfC0hXghOXqj3EheFUDKYEqns= +knative.dev/pkg v0.0.0-20231011201526-df28feae6d34 h1:H+K37bEBZ2STSWMjCgrdilj38KKZGVxBbob22K99Y50= +knative.dev/pkg v0.0.0-20231011201526-df28feae6d34/go.mod h1:ZRgzFBFmdBsARm6+Pkr9WRG8bXys8rYq64ELfLG6+9w= +knative.dev/serving v0.37.3 h1:ebJCVLb3ZHnrJHNKDw/v5eO2Yz6F3l6lpRgAuNo4KE8= +knative.dev/serving v0.37.3/go.mod h1:v0Xbfp7olb0Gljm5l4qNuLsIf8/2p1rIt/mphxvx1z0= rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8= rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0= rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= diff --git a/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go b/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go index 8acbf3446f..4805f5b1fe 100644 --- a/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go +++ b/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go @@ -208,6 +208,10 @@ func (rs *RevisionSpec) defaultSecurityContext(psc *corev1.PodSecurityContext, c } } + if psc.RunAsNonRoot == nil { + updatedSC.RunAsNonRoot = ptr.Bool(true) + } + if *updatedSC != (corev1.SecurityContext{}) { container.SecurityContext = updatedSC } diff --git a/vendor/modules.txt b/vendor/modules.txt index 5385341392..b001eec4fd 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -968,7 +968,7 @@ k8s.io/utils/net k8s.io/utils/pointer k8s.io/utils/strings/slices k8s.io/utils/trace -# knative.dev/eventing v0.37.0 +# knative.dev/eventing v0.37.3 ## explicit; go 1.19 knative.dev/eventing/pkg/apis/config knative.dev/eventing/pkg/apis/duck @@ -999,7 +999,7 @@ knative.dev/eventing/pkg/client/clientset/versioned/typed/sources/v1beta2/fake # knative.dev/hack v0.0.0-20230417170854-f591fea109b3 ## explicit; go 1.18 knative.dev/hack -# knative.dev/networking v0.0.0-20230419144338-e5d04e805e50 +# knative.dev/networking v0.0.0-20231012063223-0b0f2107abef ## explicit; go 1.18 knative.dev/networking/pkg knative.dev/networking/pkg/apis/networking @@ -1014,7 +1014,7 @@ knative.dev/networking/pkg/http/probe knative.dev/networking/pkg/http/proxy knative.dev/networking/pkg/http/stats knative.dev/networking/pkg/k8s -# knative.dev/pkg v0.0.0-20230418073056-dfad48eaa5d0 +# knative.dev/pkg v0.0.0-20231011201526-df28feae6d34 ## explicit; go 1.18 knative.dev/pkg/apis knative.dev/pkg/apis/duck @@ -1064,7 +1064,7 @@ knative.dev/pkg/tracing/config knative.dev/pkg/tracing/propagation knative.dev/pkg/tracing/propagation/tracecontextb3 knative.dev/pkg/tracker -# knative.dev/serving v0.37.0 +# knative.dev/serving v0.37.3 ## explicit; go 1.18 knative.dev/serving/pkg/apis/autoscaling knative.dev/serving/pkg/apis/autoscaling/v1alpha1