upgrade to latest dependencies

bumping knative.dev/serving 42bc7bb...2b86c14:
  > 2b86c14 Add support for hostipc, hostpid and hostnetwork (# 15414)
  > cac5e63 Fix bug in cert manager config (# 15434)
  > 222065d Update net-kourier nightly (# 15429)
  > 57fa417 Update net-contour nightly (# 15430)
  > e740654 Update net-gateway-api nightly (# 15428)
  > 5225d4f Update net-istio nightly (# 15427)
  > 8c13034 upgrade to latest dependencies (# 15426)
bumping knative.dev/caching 989f54c...c601f82:
  > c601f82 upgrade to latest dependencies (# 883)
  > 2e84812 Update community files (# 882)
  > d2f87fc upgrade to latest dependencies (# 881)
bumping knative.dev/hack 0a23232...441a19f:
  > 441a19f remove geo replication (# 389)

Signed-off-by: Knative Automation <automation@knative.team>

go.mod

@@ -14,10 +14,10 @@ require (
 	k8s.io/apimachinery v0.29.2
 	k8s.io/client-go v0.29.2
 	k8s.io/code-generator v0.29.2
-	knative.dev/hack v0.0.0-20240730131549-0a23232167bc
+	knative.dev/hack v0.0.0-20240801232131-441a19fc9ead
 	knative.dev/networking v0.0.0-20240730152525-543181c32243
 	knative.dev/pkg v0.0.0-20240730131544-0e7ffe491d5e
-	knative.dev/serving v0.42.1-0.20240730162108-42bc7bbf5926
+	knative.dev/serving v0.42.1-0.20240801154043-2b86c14394f7
 )
 
 require (
@@ -95,7 +95,7 @@ require (
 	k8s.io/klog/v2 v2.120.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20240103051144-eec4567ac022 // indirect
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e // indirect
-	knative.dev/caching v0.0.0-20240716132144-989f54c83776 // indirect
+	knative.dev/caching v0.0.0-20240730152355-c601f824cec3 // indirect
 	sigs.k8s.io/controller-runtime v0.16.3 // indirect
 	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect

go.sum

@@ -705,16 +705,16 @@ k8s.io/kube-openapi v0.0.0-20240103051144-eec4567ac022 h1:avRdiaB03v88Mfvum2S3BB
 k8s.io/kube-openapi v0.0.0-20240103051144-eec4567ac022/go.mod h1:sIV51WBTkZrlGOJMCDZDA1IaPBUDTulPpD4y7oe038k=
 k8s.io/utils v0.0.0-20240102154912-e7106e64919e h1:eQ/4ljkx21sObifjzXwlPKpdGLrCfRziVtos3ofG/sQ=
 k8s.io/utils v0.0.0-20240102154912-e7106e64919e/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-knative.dev/caching v0.0.0-20240716132144-989f54c83776 h1:2nINnWuXtb9e2nG/EJxSCeghcmu6qmvmomJ7woiP5Is=
-knative.dev/caching v0.0.0-20240716132144-989f54c83776/go.mod h1:Uj74eO9rLiK1eb8wmDBED1hJBZQ7MJ9cvq/d8Ktsm3c=
-knative.dev/hack v0.0.0-20240730131549-0a23232167bc h1:Dl+DvyH7quVCP7FPNVii9Md+EuYgdsH43RFBp4jvMwc=
-knative.dev/hack v0.0.0-20240730131549-0a23232167bc/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY=
+knative.dev/caching v0.0.0-20240730152355-c601f824cec3 h1:9RVCdjbAQYkQUHPOaeubQpdY8YzUSIMeAIvcz8RAN8A=
+knative.dev/caching v0.0.0-20240730152355-c601f824cec3/go.mod h1:m7oWdAp8e2iFqSpiOiyM2zUYzzlMdHc+9cULTSRuCQM=
+knative.dev/hack v0.0.0-20240801232131-441a19fc9ead h1:ViH1OEO0LViKa6W61YKUpLzOp7CJCFL9yLyIojHIuQ8=
+knative.dev/hack v0.0.0-20240801232131-441a19fc9ead/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY=
 knative.dev/networking v0.0.0-20240730152525-543181c32243 h1:LD1SBebiWctT3NUTVAHcgoHYzvXeWdkgn/JfgMF2OaU=
 knative.dev/networking v0.0.0-20240730152525-543181c32243/go.mod h1:bBdtfiQEMV4F3nET1NxS8OqERgo7K5DLiHDcNlXXjBw=
 knative.dev/pkg v0.0.0-20240730131544-0e7ffe491d5e h1:pRbTdwG1ePdAJ+8mwFbtsY5gKFBaF+299QgY8BRn+ng=
 knative.dev/pkg v0.0.0-20240730131544-0e7ffe491d5e/go.mod h1:wQoeURvX7/oMI5ZcNowGGIX4cmOUzew1cyNf3KRZdFE=
-knative.dev/serving v0.42.1-0.20240730162108-42bc7bbf5926 h1:HrOvi27noFwIA7qQfpPYORnXGQsD4+/DTa6htY01BXo=
-knative.dev/serving v0.42.1-0.20240730162108-42bc7bbf5926/go.mod h1:3FijTbV1GTO2O/G8WH/NDLVnK0xCi85V1+9kEbbLl/g=
+knative.dev/serving v0.42.1-0.20240801154043-2b86c14394f7 h1:LsDLuvWsQaKDZ6JmxUfa1/N3t2+I4ePwIDy+/cWAGOA=
+knative.dev/serving v0.42.1-0.20240801154043-2b86c14394f7/go.mod h1:0m3iOOYT/gSq39nhZTIPHmEwjSGyLYH/h3wz4J8OErw=
 pgregory.net/rapid v1.1.0 h1:CMa0sjHSru3puNx+J0MIAuiiEV4N0qj8/cMWGBBCsjw=
 pgregory.net/rapid v1.1.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=

vendor/knative.dev/hack/release.sh

@@ -33,36 +33,12 @@ readonly RELEASE_GCR="gcr.io/knative-releases/github.com/${ORG_NAME}/${REPO_NAME
 readonly NIGHTLY_SIGNING_IDENTITY="signer@knative-nightly.iam.gserviceaccount.com"
 readonly RELEASE_SIGNING_IDENTITY="signer@knative-releases.iam.gserviceaccount.com"
 
-# Georeplicate images to {us,eu,asia}.gcr.io
-readonly GEO_REPLICATION=(us eu asia)
-
 # Simple banner for logging purposes.
 # Parameters: $* - message to display.
 function banner() {
   subheader "$*"
 }
 
-# Tag images in the yaml files if $TAG is not empty.
-# $KO_DOCKER_REPO is the registry containing the images to tag with $TAG.
-# Parameters: $1..$n - files to parse for images (non .yaml files are ignored).
-function tag_images_in_yamls() {
-  [[ -z ${TAG} ]] && return 0
-  local SRC_DIR="${GOPATH}/src/"
-  local DOCKER_BASE="${KO_DOCKER_REPO}/${REPO_ROOT_DIR/$SRC_DIR}"
-  local GEO_REGIONS="${GEO_REPLICATION[@]} "
-  echo "Tagging any images under '${DOCKER_BASE}' with ${TAG}"
-  # shellcheck disable=SC2068
-  for file in $@; do
-    [[ "${file##*.}" != "yaml" ]] && continue
-    echo "Inspecting ${file}"
-    for image in $(grep -o "${DOCKER_BASE}/[a-z\./-]\+@sha256:[0-9a-f]\+" "${file}"); do
-      for region in "" ${GEO_REGIONS// /. }; do
-        gcloud -q container images add-tag "${image}" "${region}${image%%@*}:${TAG}"
-      done
-    done
-  done
-}
-
 # Copy the given files to the $RELEASE_GCS_BUCKET bucket's "latest" directory.
 # If $TAG is not empty, also copy them to $RELEASE_GCS_BUCKET bucket's "previous" directory.
 # Parameters: $1..$n - files to copy.
@@ -646,7 +622,6 @@ function run_validation_tests() {
 # Parameters: $1..$n - files to add to the release.
 function publish_artifacts() {
   (( ! PUBLISH_RELEASE )) && return
-  tag_images_in_yamls "${ARTIFACTS_TO_PUBLISH}"
   if [[ -n "${RELEASE_DIR}" ]]; then
     cp "${ARTIFACTS_TO_PUBLISH}" "${RELEASE_DIR}" || abort "cannot copy release to '${RELEASE_DIR}'"
   fi

vendor/knative.dev/serving/pkg/apis/config/features.go

@@ -64,6 +64,9 @@ func defaultFeaturesConfig() *Features {
 		PodSpecRuntimeClassName:          Disabled,
 		PodSpecSecurityContext:           Disabled,
 		PodSpecShareProcessNamespace:     Disabled,
+		PodSpecHostIPC:                   Disabled,
+		PodSpecHostPID:                   Disabled,
+		PodSpecHostNetwork:               Disabled,
 		PodSpecPriorityClassName:         Disabled,
 		PodSpecSchedulerName:             Disabled,
 		ContainerSpecAddCapabilities:     Disabled,
@@ -98,11 +101,15 @@ func NewFeaturesConfigFromMap(data map[string]string) (*Features, error) {
 		asFlag("kubernetes.podspec-runtimeclassname", &nc.PodSpecRuntimeClassName),
 		asFlag("kubernetes.podspec-securitycontext", &nc.PodSpecSecurityContext),
 		asFlag("kubernetes.podspec-shareprocessnamespace", &nc.PodSpecShareProcessNamespace),
+		asFlag("kubernetes.podspec-hostipc", &nc.PodSpecHostIPC),
 		asFlag("kubernetes.podspec-priorityclassname", &nc.PodSpecPriorityClassName),
 		asFlag("kubernetes.podspec-schedulername", &nc.PodSpecSchedulerName),
 		asFlag("kubernetes.containerspec-addcapabilities", &nc.ContainerSpecAddCapabilities),
 		asFlag("kubernetes.podspec-tolerations", &nc.PodSpecTolerations),
 		asFlag("kubernetes.podspec-volumes-emptydir", &nc.PodSpecVolumesEmptyDir),
+		asFlag("kubernetes.podspec-hostipc", &nc.PodSpecHostIPC),
+		asFlag("kubernetes.podspec-hostpid", &nc.PodSpecHostPID),
+		asFlag("kubernetes.podspec-hostnetwork", &nc.PodSpecHostNetwork),
 		asFlag("kubernetes.podspec-init-containers", &nc.PodSpecInitContainers),
 		asFlag("kubernetes.podspec-persistent-volume-claim", &nc.PodSpecPersistentVolumeClaim),
 		asFlag("kubernetes.podspec-persistent-volume-write", &nc.PodSpecPersistentVolumeWrite),
@@ -136,6 +143,9 @@ type Features struct {
 	PodSpecRuntimeClassName          Flag
 	PodSpecSecurityContext           Flag
 	PodSpecShareProcessNamespace     Flag
+	PodSpecHostIPC                   Flag
+	PodSpecHostPID                   Flag
+	PodSpecHostNetwork               Flag
 	PodSpecPriorityClassName         Flag
 	PodSpecSchedulerName             Flag
 	ContainerSpecAddCapabilities     Flag

vendor/knative.dev/serving/pkg/apis/serving/fieldmask.go

@@ -263,16 +263,21 @@ func PodSpecMask(ctx context.Context, in *corev1.PodSpec) *corev1.PodSpec {
 	if cfg.Features.PodSpecDNSConfig != config.Disabled {
 		out.DNSConfig = in.DNSConfig
 	}
-
+	if cfg.Features.PodSpecHostIPC != config.Disabled {
+		out.HostIPC = in.HostIPC
+	}
+	if cfg.Features.PodSpecHostPID != config.Disabled {
+		out.HostPID = in.HostPID
+	}
+	if cfg.Features.PodSpecHostNetwork != config.Disabled {
+		out.HostNetwork = in.HostNetwork
+	}
 	// Disallowed fields
 	// This list is unnecessary, but added here for clarity
 	out.RestartPolicy = ""
 	out.TerminationGracePeriodSeconds = nil
 	out.ActiveDeadlineSeconds = nil
 	out.NodeName = ""
-	out.HostNetwork = false
-	out.HostPID = false
-	out.HostIPC = false
 	out.Hostname = ""
 	out.Subdomain = ""
 	out.Priority = nil

vendor/modules.txt

@@ -941,7 +941,7 @@ k8s.io/utils/pointer
 k8s.io/utils/ptr
 k8s.io/utils/strings/slices
 k8s.io/utils/trace
-# knative.dev/caching v0.0.0-20240716132144-989f54c83776
+# knative.dev/caching v0.0.0-20240730152355-c601f824cec3
 ## explicit; go 1.22
 knative.dev/caching/pkg/apis/caching
 knative.dev/caching/pkg/apis/caching/v1alpha1
@@ -953,7 +953,7 @@ knative.dev/caching/pkg/client/clientset/versioned/typed/caching/v1alpha1/fake
 knative.dev/caching/pkg/client/injection/client
 knative.dev/caching/pkg/client/injection/client/fake
 knative.dev/caching/pkg/client/listers/caching/v1alpha1
-# knative.dev/hack v0.0.0-20240730131549-0a23232167bc
+# knative.dev/hack v0.0.0-20240801232131-441a19fc9ead
 ## explicit; go 1.21
 knative.dev/hack
 # knative.dev/networking v0.0.0-20240730152525-543181c32243
@@ -1052,7 +1052,7 @@ knative.dev/pkg/tracker
 knative.dev/pkg/version
 knative.dev/pkg/webhook
 knative.dev/pkg/webhook/certificates/resources
-# knative.dev/serving v0.42.1-0.20240730162108-42bc7bbf5926
+# knative.dev/serving v0.42.1-0.20240801154043-2b86c14394f7
 ## explicit; go 1.22
 knative.dev/serving/pkg/apis/autoscaling
 knative.dev/serving/pkg/apis/autoscaling/v1alpha1