diff --git a/go.mod b/go.mod index ec901841ab..3fb858054a 100644 --- a/go.mod +++ b/go.mod @@ -21,11 +21,11 @@ require ( k8s.io/client-go v0.26.5 k8s.io/code-generator v0.26.5 k8s.io/utils v0.0.0-20221108210102-8e77b1f39fe2 - knative.dev/caching v0.0.0-20230912162410-709c3f780baa - knative.dev/eventing v0.38.1-0.20230913074233-d2502021e142 - knative.dev/hack v0.0.0-20230911131120-3af329f73ff3 - knative.dev/pkg v0.0.0-20230912052245-8d736b687bf4 - knative.dev/serving v0.38.1-0.20230913063834-32c2732efcf1 + knative.dev/caching v0.0.0-20230914013713-ad1892e0aa0a + knative.dev/eventing v0.38.1-0.20230914134936-ef994bef0a2e + knative.dev/hack v0.0.0-20230914013105-0bb79ff2d162 + knative.dev/pkg v0.0.0-20230914012755-978068686674 + knative.dev/serving v0.38.1-0.20230914175124-55bec5f5f8ca sigs.k8s.io/yaml v1.3.0 ) diff --git a/go.sum b/go.sum index 1182a1963d..0ef299557f 100644 --- a/go.sum +++ b/go.sum @@ -1388,18 +1388,18 @@ k8s.io/utils v0.0.0-20210819203725-bdf08cb9a70a/go.mod h1:jPW/WVKK9YHAvNhRxK0md/ k8s.io/utils v0.0.0-20210930125809-cb0fa318a74b/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA= k8s.io/utils v0.0.0-20221108210102-8e77b1f39fe2 h1:GfD9OzL11kvZN5iArC6oTS7RTj7oJOIfnislxYlqTj8= k8s.io/utils v0.0.0-20221108210102-8e77b1f39fe2/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= -knative.dev/caching v0.0.0-20230912162410-709c3f780baa h1:n+b0TNPIJ2AaGzVAibWTIaTmQfliOxCREqz0BOHIETQ= -knative.dev/caching v0.0.0-20230912162410-709c3f780baa/go.mod h1:wWX1QRP0iTH4e6otIPwZJv8IqgrtQOqdumYQy3seDT4= -knative.dev/eventing v0.38.1-0.20230913074233-d2502021e142 h1:lRCcbdEn0GkxXmPVYmRdn4q7Z33TWB0jmJvCuS9I0Ts= -knative.dev/eventing v0.38.1-0.20230913074233-d2502021e142/go.mod h1:drwtJr2Wan4oW+K9DLoN+mkG5LaRgH9LhuxV646hBKk= -knative.dev/hack v0.0.0-20230911131120-3af329f73ff3 h1:3vOdwAi/IjOTQvL2nP3RDRgPuYIbSRqEgaIgAgDFC08= -knative.dev/hack v0.0.0-20230911131120-3af329f73ff3/go.mod h1:dx0YG3YWqJu653e9tjcT0Q1ZdS9JJXLKbUhzr4EB0g8= +knative.dev/caching v0.0.0-20230914013713-ad1892e0aa0a h1:Bz5C8tw7uphOSnHIg8zFZ1tk3SGMPigNWefo6LhFvgE= +knative.dev/caching v0.0.0-20230914013713-ad1892e0aa0a/go.mod h1:wWX1QRP0iTH4e6otIPwZJv8IqgrtQOqdumYQy3seDT4= +knative.dev/eventing v0.38.1-0.20230914134936-ef994bef0a2e h1:2GLVnK62RG6KCEOoflbYijx2MjM5R8Ghsb3hD56nGec= +knative.dev/eventing v0.38.1-0.20230914134936-ef994bef0a2e/go.mod h1:drwtJr2Wan4oW+K9DLoN+mkG5LaRgH9LhuxV646hBKk= +knative.dev/hack v0.0.0-20230914013105-0bb79ff2d162 h1:5IYUAmyfUsvSoP5ZQmqBetYLMv/EUEayC4uHEuhTnCo= +knative.dev/hack v0.0.0-20230914013105-0bb79ff2d162/go.mod h1:dx0YG3YWqJu653e9tjcT0Q1ZdS9JJXLKbUhzr4EB0g8= knative.dev/networking v0.0.0-20230911132222-48042038ea3d h1:4ja2C3Azc3N7mOypo2efX3j5OalvBU3FwGGxHM8GDo0= knative.dev/networking v0.0.0-20230911132222-48042038ea3d/go.mod h1:+QuFm3aotxR+gM69XilYuJiu5JOyGf1Mlw42IfSaCkk= -knative.dev/pkg v0.0.0-20230912052245-8d736b687bf4 h1:NIbGbJVexRp+LJJOjO9hA/Wpn2IQa8e73D8malbVuGs= -knative.dev/pkg v0.0.0-20230912052245-8d736b687bf4/go.mod h1:+1DsxX8h0ftiZCgFZQpIUC9QwaLGv79BG+kDaCjms8c= -knative.dev/serving v0.38.1-0.20230913063834-32c2732efcf1 h1:EVg+INzrlVprKjXZbHnRQZKgtaJ2wli5AMjzSidvP6s= -knative.dev/serving v0.38.1-0.20230913063834-32c2732efcf1/go.mod h1:Tukd54E8w6qEidsWl5OoQg5CbK6LjBvyS+M8mOvySBg= +knative.dev/pkg v0.0.0-20230914012755-978068686674 h1:ww06U9yD6uQPqskgXpyHj7z3Nfj+tN9kJar0fmrTzx0= +knative.dev/pkg v0.0.0-20230914012755-978068686674/go.mod h1:+1DsxX8h0ftiZCgFZQpIUC9QwaLGv79BG+kDaCjms8c= +knative.dev/serving v0.38.1-0.20230914175124-55bec5f5f8ca h1:Iu47rA/gtZ7wRaCm6881bLHWl70Psc4W2pEhPVeUBRM= +knative.dev/serving v0.38.1-0.20230914175124-55bec5f5f8ca/go.mod h1:Tukd54E8w6qEidsWl5OoQg5CbK6LjBvyS+M8mOvySBg= nhooyr.io/websocket v1.8.6/go.mod h1:B70DZP8IakI65RVQ51MsWP/8jndNma26DVA/nFSCgW0= pgregory.net/rapid v1.0.0 h1:iQaM2w5PZ6xvt6x7hbd7tiDS+nk7YPp5uCaEba+T/F4= rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8= diff --git a/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go b/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go index 8acbf3446f..4805f5b1fe 100644 --- a/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go +++ b/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_defaults.go @@ -208,6 +208,10 @@ func (rs *RevisionSpec) defaultSecurityContext(psc *corev1.PodSecurityContext, c } } + if psc.RunAsNonRoot == nil { + updatedSC.RunAsNonRoot = ptr.Bool(true) + } + if *updatedSC != (corev1.SecurityContext{}) { container.SecurityContext = updatedSC } diff --git a/vendor/modules.txt b/vendor/modules.txt index c11f1e7bbe..e2d363d112 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -1257,11 +1257,11 @@ k8s.io/utils/net k8s.io/utils/pointer k8s.io/utils/strings/slices k8s.io/utils/trace -# knative.dev/caching v0.0.0-20230912162410-709c3f780baa +# knative.dev/caching v0.0.0-20230914013713-ad1892e0aa0a ## explicit; go 1.18 knative.dev/caching/pkg/apis/caching knative.dev/caching/pkg/apis/caching/v1alpha1 -# knative.dev/eventing v0.38.1-0.20230913074233-d2502021e142 +# knative.dev/eventing v0.38.1-0.20230914134936-ef994bef0a2e ## explicit; go 1.19 knative.dev/eventing/pkg/apis/config knative.dev/eventing/pkg/apis/duck @@ -1350,7 +1350,7 @@ knative.dev/eventing/test/upgrade/prober/wathola/fetcher knative.dev/eventing/test/upgrade/prober/wathola/forwarder knative.dev/eventing/test/upgrade/prober/wathola/receiver knative.dev/eventing/test/upgrade/prober/wathola/sender -# knative.dev/hack v0.0.0-20230911131120-3af329f73ff3 +# knative.dev/hack v0.0.0-20230914013105-0bb79ff2d162 ## explicit; go 1.18 knative.dev/hack knative.dev/hack/shell @@ -1369,7 +1369,7 @@ knative.dev/networking/pkg/http/probe knative.dev/networking/pkg/http/proxy knative.dev/networking/pkg/http/stats knative.dev/networking/pkg/k8s -# knative.dev/pkg v0.0.0-20230912052245-8d736b687bf4 +# knative.dev/pkg v0.0.0-20230914012755-978068686674 ## explicit; go 1.18 knative.dev/pkg/apiextensions/storageversion knative.dev/pkg/apiextensions/storageversion/cmd/migrate @@ -1449,7 +1449,7 @@ knative.dev/pkg/webhook knative.dev/pkg/webhook/certificates knative.dev/pkg/webhook/certificates/resources knative.dev/pkg/webhook/resourcesemantics/conversion -# knative.dev/serving v0.38.1-0.20230913063834-32c2732efcf1 +# knative.dev/serving v0.38.1-0.20230914175124-55bec5f5f8ca ## explicit; go 1.18 knative.dev/serving/pkg/apis/autoscaling knative.dev/serving/pkg/apis/autoscaling/v1alpha1