From dba360b3a356e2849bcc24891f75610622bda59f Mon Sep 17 00:00:00 2001 From: Kenny Leung Date: Tue, 26 Sep 2023 06:58:18 -0700 Subject: [PATCH] cleanup: update knative serving from 0.38.0 to 0.38.1 (#171) update knative serving from 0.38.0 to 0.38.1 Signed-off-by: Kenny Leung --- go.mod | 2 +- go.sum | 4 ++-- .../serving/pkg/apis/serving/v1/revision_defaults.go | 4 ++++ .../serving/pkg/reconciler/revision/resources/queue.go | 3 +++ vendor/modules.txt | 2 +- 5 files changed, 11 insertions(+), 4 deletions(-) diff --git a/go.mod b/go.mod index 035227598..ddbf1745d 100644 --- a/go.mod +++ b/go.mod @@ -15,7 +15,7 @@ require ( knative.dev/net-istio v0.38.0 knative.dev/networking v0.0.0-20230718160410-75dcd54d9510 knative.dev/pkg v0.0.0-20230718152110-aef227e72ead - knative.dev/serving v0.38.0 + knative.dev/serving v0.38.1 ) diff --git a/go.sum b/go.sum index 0d333f02c..f340f82af 100644 --- a/go.sum +++ b/go.sum @@ -835,8 +835,8 @@ knative.dev/networking v0.0.0-20230718160410-75dcd54d9510 h1:eNbWjEkbtGjCqK5TB4S knative.dev/networking v0.0.0-20230718160410-75dcd54d9510/go.mod h1:Vngl91M++hqgoGNIjCii7MXnsEeN3kRbGC1aodhFqbk= knative.dev/pkg v0.0.0-20230718152110-aef227e72ead h1:2dDzorpKuVZW3Qp7TbirMMq16FbId8f6bacQFX8jXLw= knative.dev/pkg v0.0.0-20230718152110-aef227e72ead/go.mod h1:WmrwRV/P+hGHoMraAEfwg6ec+fBTf+Obu41v354Iabc= -knative.dev/serving v0.38.0 h1:h2PLGbhXmE1P2jB5ozjnXT6CagadMykaJW4Q/dhv0os= -knative.dev/serving v0.38.0/go.mod h1:3/KPMVdVOZSHdrRhvelLuxuO+Ftln2ZTKq8R3gUu6Gw= +knative.dev/serving v0.38.1 h1:ALKyyKA1Xf083Es2SOE8HeCy/vFhFWE6TcHNxurDf5k= +knative.dev/serving v0.38.1/go.mod h1:3/KPMVdVOZSHdrRhvelLuxuO+Ftln2ZTKq8R3gUu6Gw= rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8= rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0= rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= diff --git a/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go b/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go index 8acbf3446..4805f5b1f 100644 --- a/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go +++ b/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go @@ -208,6 +208,10 @@ func (rs *RevisionSpec) defaultSecurityContext(psc *corev1.PodSecurityContext, c } } + if psc.RunAsNonRoot == nil { + updatedSC.RunAsNonRoot = ptr.Bool(true) + } + if *updatedSC != (corev1.SecurityContext{}) { container.SecurityContext = updatedSC } diff --git a/vendor/knative.dev/serving/pkg/reconciler/revision/resources/queue.go b/vendor/knative.dev/serving/pkg/reconciler/revision/resources/queue.go index 01263613c..423f43dd0 100644 --- a/vendor/knative.dev/serving/pkg/reconciler/revision/resources/queue.go +++ b/vendor/knative.dev/serving/pkg/reconciler/revision/resources/queue.go @@ -86,6 +86,9 @@ var ( Capabilities: &corev1.Capabilities{ Drop: []corev1.Capability{"ALL"}, }, + SeccompProfile: &corev1.SeccompProfile{ + Type: corev1.SeccompProfileTypeRuntimeDefault, + }, } ) diff --git a/vendor/modules.txt b/vendor/modules.txt index 3bb8d6f54..33317cee8 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -1322,7 +1322,7 @@ knative.dev/pkg/webhook/resourcesemantics/defaulting knative.dev/pkg/webhook/resourcesemantics/validation knative.dev/pkg/webhook/testing knative.dev/pkg/websocket -# knative.dev/serving v0.38.0 +# knative.dev/serving v0.38.1 ## explicit; go 1.18 knative.dev/serving/cmd/activator knative.dev/serving/cmd/autoscaler