chore(deps): Update to Knative Serving 1.14.0

Signed-off-by: Thomas Vitale <[email protected]>
kadras-io · May 17, 2024 · 6890920 · 6890920
1 parent b46b283
commit 6890920
Show file tree

Hide file tree

Showing 16 changed files with 2,524 additions and 692 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -18,6 +18,6 @@ jobs:
       registry-server: ghcr.io
       registry-username: ${{ github.actor }}
       image: ${{ github.repository }}
-      version: 1.13.1
+      version: 1.14.0
     secrets:
       pull-request-token: ${{ secrets.GH_ORG_PAT }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -14,7 +14,7 @@ jobs:
     name: Integration Tests
     strategy:
       matrix:
-        k8s_version: [v1.27, v1.28, v1.29]
+        k8s_version: [v1.28, v1.29, v1.30]
     permissions:
       contents: read
     uses: kadras-io/github-reusable-workflows/.github/workflows/carvel-package-test-integration.yml@main

diff --git a/Makefile b/Makefile
@@ -1,4 +1,4 @@
-K8S_VERSION=v1.29
+K8S_VERSION=v1.30
 
 # Build package configuration
 build: package

diff --git a/README.md b/README.md
@@ -12,7 +12,7 @@ A Carvel package for [Knative Serving](https://knative.dev/docs/serving), a solu
 
 ### Prerequisites
 
-* Kubernetes 1.27+
+* Kubernetes 1.28+
 * Carvel [`kctrl`](https://carvel.dev/kapp-controller/docs/latest/install/#installing-kapp-controller-cli-kctrl) CLI.
 * Carvel [kapp-controller](https://carvel.dev/kapp-controller) deployed in your Kubernetes cluster. You can install it with Carvel [`kapp`](https://carvel.dev/kapp/docs/latest/install) (recommended choice) or `kubectl`.
 

diff --git a/package/config/upstream/net-cert-manager/net-certmanager.yaml b/package/config/upstream/net-cert-manager/net-certmanager.yaml
@@ -19,7 +19,7 @@ metadata:
   name: knative-serving-certmanager
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     serving.knative.dev/controller: "true"
     networking.knative.dev/certificate-provider: cert-manager
@@ -52,7 +52,7 @@ metadata:
   name: config.webhook.net-certmanager.networking.internal.knative.dev
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 webhooks:
@@ -93,7 +93,7 @@ metadata:
   namespace: knative-serving
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 
@@ -119,7 +119,7 @@ metadata:
   namespace: knative-serving
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 data:
@@ -187,7 +187,7 @@ metadata:
   namespace: knative-serving
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 spec:
@@ -199,15 +199,15 @@ spec:
       labels:
         app: net-certmanager-controller
         app.kubernetes.io/component: net-certmanager
-        app.kubernetes.io/version: "1.13.0"
+        app.kubernetes.io/version: "1.14.0"
         app.kubernetes.io/name: knative-serving
     spec:
       serviceAccountName: controller
       containers:
         - name: controller
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-releases/knative.dev/net-certmanager/cmd/controller@sha256:7a4c09c783c0cd4fab23e0ed225836e86f12b69e4f74c1fdba428fa5bea1b404
+          image: gcr.io/knative-releases/knative.dev/net-certmanager/cmd/controller@sha256:7d83c110fffe52f8d00df4e272de702de57293cf013bb07b66c67fd8465e3c72
           resources:
             requests:
               cpu: 30m
@@ -248,7 +248,7 @@ metadata:
   labels:
     app: net-certmanager-controller
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
   name: net-certmanager-controller
@@ -286,7 +286,7 @@ metadata:
   name: selfsigned-cluster-issuer
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
     knative.dev/issuer-install: "true"
@@ -299,7 +299,7 @@ metadata:
   name: knative-selfsigned-issuer
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
     knative.dev/issuer-install: "true"
@@ -314,7 +314,7 @@ metadata:
   namespace: cert-manager #  If you want to use it as a ClusterIssuer the secret must be in the cert-manager namespace.
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
     knative.dev/issuer-install: "true"
@@ -350,7 +350,7 @@ metadata:
   namespace: knative-serving
   labels:
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 spec:
@@ -363,7 +363,7 @@ spec:
       labels:
         app: net-certmanager-webhook
         app.kubernetes.io/component: net-certmanager
-        app.kubernetes.io/version: "1.13.0"
+        app.kubernetes.io/version: "1.14.0"
         app.kubernetes.io/name: knative-serving
         role: net-certmanager-webhook
     spec:
@@ -372,7 +372,7 @@ spec:
         - name: webhook
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook@sha256:7b91c136d2efa59b35a60cda17a78c61142fc23713565fc5af1e369146a26a96
+          image: gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook@sha256:071447f170acb8bd11528eac7df1940ed9411da491af827e6a6d4749f1f2dc0d
           resources:
             requests:
               cpu: 20m
@@ -438,7 +438,7 @@ metadata:
   labels:
     role: net-certmanager-webhook
     app.kubernetes.io/component: net-certmanager
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     app.kubernetes.io/name: knative-serving
     networking.knative.dev/certificate-provider: cert-manager
 spec:

diff --git a/package/config/upstream/net-contour/net-contour.yaml b/package/config/upstream/net-contour/net-contour.yaml
@@ -8,7 +8,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
     serving.knative.dev/controller: "true"
 rules:
   - apiGroups: ["projectcontour.io"]
@@ -38,7 +38,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
 data:
   _example: |
     ################################
@@ -71,6 +71,22 @@ data:
       ClusterLocal:
         class: contour-internal
         service: contour-internal/envoy
+    # cors-policy contains the configuration to set CORS policy for HTTPProxies.
+    cors-policy: |
+      allowCredentials: true
+      allowOrigin:
+        - example.com
+      allowMethods:
+        - GET
+        - POST
+        - OPTIONS
+      allowHeaders:
+        - authorization
+        - cache-control
+      exposeHeaders:
+        - Content-Length
+        - Content-Range
+      maxAge: "10m"
 
 # Copyright 2020 The Knative Authors
 #
@@ -95,7 +111,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
 spec:
   replicas: 1
   selector:
@@ -107,14 +123,14 @@ spec:
         app: net-contour-controller
         app.kubernetes.io/component: net-contour
         app.kubernetes.io/name: knative-serving
-        app.kubernetes.io/version: "1.13.0"
+        app.kubernetes.io/version: "1.14.0"
     spec:
       serviceAccountName: controller
       containers:
         - name: controller
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-releases/knative.dev/net-contour/cmd/controller@sha256:a14826bbd58f4eb73cb8af20e977b6841d29b1f7c9f8b48f24f8f36860780542
+          image: gcr.io/knative-releases/knative.dev/net-contour/cmd/controller@sha256:e25cf3d9a29e487db94b6448a5a4bbb2f1e506c9c20c7db5584ba6bc153a3c73
           resources:
             requests:
               cpu: 40m
@@ -158,7 +174,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "1.13.0"
+    app.kubernetes.io/version: "1.14.0"
 spec:
   delegations:
     - secretName: knative-serving-certs