Release notes for Serving 1.9

tags: Release Notes Serving

Changelog since 1.8

🚨 Breaking or Notable

• Min K8s Version is v1.24+ - see our release schedule for EOL dates

💫 New Features & Changes

• Knative will now warn (but not error) when creating or updating a PodSpec
  where containers have additional privilege due to unset SecurityContext values.
  Explicitly setting these values to any setting, including high-privilege ones,
  will disable this warning.

  These fields are:

  • runAsNonRoot (empty means false)
  • allowPrivilegeEscalation (empty means true)
  • seccompProfile.type (empty string means Unconfined)
  • capabilities.drop (default maintains privileges, use ALL to drop unneeded linux capabilities) (#13399, @evankanderson)

• Adds the secure-pod-defaults feature, which is defaulted to Disabled in
  this release.

  When enabled, containers described by users will have best-practice
  SecurityContext features enabled unless insecure settings are specifically
  requested. (#13398, @evankanderson)

• Work around for cert-manager not allowing us to create certs for 64+ bytes name ksvc (#13569, @KauzClay)

• Autoscaler now runs a single leader election go routine (#13585, @dprotaso)

Small fixes

• Add app label to Service selector for webhook and domainmapping-webhook. (#13265, @a7i)
• Upgrade tests now stream logs from user and system namespace. The logs are printed on failure. (#13587, @mgencur)

Bug or Regression

• Changes to Pod or Revision-level defaults during Knative upgrades will no longer be attempted (and failed) when supplying your own Revision name. (#13565, @evankanderson)

Dependencies

Added

Nothing has changed.

Changed

• go.uber.org/goleak: v1.1.12 → v1.2.0
• k8s.io/api: v0.25.2 → v0.25.4
• k8s.io/apiextensions-apiserver: v0.25.2 → v0.25.4
• k8s.io/apimachinery: v0.25.2 → v0.25.4
• k8s.io/apiserver: v0.25.2 → v0.25.4
• k8s.io/client-go: v0.25.2 → v0.25.4
• k8s.io/code-generator: v0.25.2 → v0.25.4
• k8s.io/component-base: v0.25.2 → v0.25.4
• k8s.io/gengo: 397b4ae → fad74ee
• k8s.io/klog/v2: 0990e81 → 9ae4992
• k8s.io/utils: ee6ede2 → 8e77b1f
• knative.dev/caching: ce26e92 → 7a31fde
• knative.dev/control-protocol: 3e2f878 → cffe208
• knative.dev/hack: 3fdc50b → c7cfcb0
• knative.dev/networking: 58f3e62 → db2bcbe
• knative.dev/pkg: b78020c → 247510c
• knative.dev/reconciler-test: 090970c → 894bc70
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.32 → v0.0.33

Removed

Nothing has changed.