[RELEASE-1.11] Sync with upstream release-1.11 (#580)

* [release-1.11] fix securityContext for Knative Service Pod (user-container and queue-proxy) (knative#14378)

* add seccompProfile to queue container security context

* run as non root by default

* update tests to expect new default run as nonroot

---------

Co-authored-by: Clay Kauzlaric <[email protected]>

* Leave a comment which will trigger a new dot release (knative#14500)

* [release-1.11] bump x/net to v0.17 (knative#14516)

* [release-1.11] bump x/net to v1.17

* Re-generate test/config/tls/cert-secret.yaml (knative#14324)

* Run hack/update-codegen.sh --upgrade --release 1.11

* Bound buffer for reading stats (knative#14542)

Co-authored-by: Evan Anderson <[email protected]>

* upgrade to latest dependencies (knative#14552)

bumping knative.dev/pkg bd99f2f...56bfe0d:
  > 56bfe0d [release-1.11] [CVE-2023-44487] Disable http2 for webhooks (# 2875)
bumping knative.dev/caching 24ff723...ee89f75:
  > ee89f75 upgrade to latest dependencies (# 797)

Signed-off-by: Knative Automation <[email protected]>

* Upgrade grpc for addressing GHSA-m425-mq94-257g (knative#14579)

More info at GHSA-m425-mq94-257g

* remove duplicate 'additionalPrinterColumns' (knative#14654)

Signed-off-by: Kenny Leung <[email protected]>
Co-authored-by: Kenny Leung <[email protected]>

* [release-1.11] Bump to fix knative#14732 (knative#14734)

* Bump to fix knative#14732

* Bump to fix serving/knative#14732

* Sync with upstream release-1.11

---------

Signed-off-by: Knative Automation <[email protected]>
Signed-off-by: Kenny Leung <[email protected]>
Co-authored-by: Knative Prow Robot <[email protected]>
Co-authored-by: Clay Kauzlaric <[email protected]>
Co-authored-by: Kenjiro Nakayama <[email protected]>
Co-authored-by: Evan Anderson <[email protected]>
Co-authored-by: Knative Automation <[email protected]>
Co-authored-by: Juan Sanin <[email protected]>
Co-authored-by: Kenny Leung <[email protected]>
Co-authored-by: Dave Protasowski <[email protected]>

config/core/300-resources/domain-mapping.yaml

@@ -263,16 +263,6 @@ spec:
  url:
  description: URL is the URL of this DomainMapping.
  type: string
- additionalPrinterColumns:
- - name: URL
- type: string
- jsonPath: .status.url
- - name: Ready
- type: string
- jsonPath: ".status.conditions[?(@.type=='Ready')].status"
- - name: Reason
- type: string
- jsonPath: ".status.conditions[?(@.type=='Ready')].reason"
  names:
  kind: DomainMapping
  plural: domainmappings

go.mod

@@ -2,8 +2,9 @@ module knative.dev/serving
 
 // This comment was added so CI would trigger a point release with a
 // newer version of Go
-// Fixes: https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
-
+// Fixes:
+// - https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
+// - https://github.com/knative/serving/issues/14732
 go 1.18
 
 require (
@@ -28,7 +29,7 @@ require (
  golang.org/x/sync v0.2.0
  golang.org/x/time v0.3.0
  google.golang.org/api v0.124.0
- google.golang.org/grpc v1.56.1
+ google.golang.org/grpc v1.56.3
  k8s.io/api v0.26.5
  k8s.io/apiextensions-apiserver v0.26.5
  k8s.io/apimachinery v0.26.5

go.sum

@@ -934,8 +934,8 @@ google.golang.org/grpc v1.36.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAG
 google.golang.org/grpc v1.40.0/go.mod h1:ogyxbiOoUXAkP+4+xa6PZSE9DZgIHtSpzjDTB9KAK34=
 google.golang.org/grpc v1.41.0/go.mod h1:U3l9uK9J0sini8mHphKoXyaqDA/8VyGnDee1zzIUK6k=
 google.golang.org/grpc v1.45.0/go.mod h1:lN7owxKUQEqMfSyQikvvk5tf/6zMPsrK+ONuO11+0rQ=
-google.golang.org/grpc v1.56.1 h1:z0dNfjIl0VpaZ9iSVjA6daGatAYwPGstTjt5vkRMFkQ=
-google.golang.org/grpc v1.56.1/go.mod h1:I9bI3vqKfayGqPUAwGdOSu7kt6oIJLixfffKrpXqQ9s=
+google.golang.org/grpc v1.56.3 h1:8I4C0Yq1EjstUzUJzpcRVbuYA2mODtEmpWiQoN/b2nc=
+google.golang.org/grpc v1.56.3/go.mod h1:I9bI3vqKfayGqPUAwGdOSu7kt6oIJLixfffKrpXqQ9s=
 google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
 google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
 google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=

openshift/release/artifacts/serving-core.yaml

@@ -1892,16 +1892,6 @@ spec:
  url:
  description: URL is the URL of this DomainMapping.
  type: string
- additionalPrinterColumns:
- - name: URL
- type: string
- jsonPath: .status.url
- - name: Ready
- type: string
- jsonPath: ".status.conditions[?(@.type=='Ready')].status"
- - name: Reason
- type: string
- jsonPath: ".status.conditions[?(@.type=='Ready')].reason"
  names:
  kind: DomainMapping
  plural: domainmappings

openshift/release/artifacts/serving-crds.yaml

@@ -1501,16 +1501,6 @@ spec:
  url:
  description: URL is the URL of this DomainMapping.
  type: string
- additionalPrinterColumns:
- - name: URL
- type: string
- jsonPath: .status.url
- - name: Ready
- type: string
- jsonPath: ".status.conditions[?(@.type=='Ready')].status"
- - name: Reason
- type: string
- jsonPath: ".status.conditions[?(@.type=='Ready')].reason"
  names:
  kind: DomainMapping
  plural: domainmappings

vendor/modules.txt

@@ -678,7 +678,7 @@ google.golang.org/genproto/googleapis/api/httpbody
 google.golang.org/genproto/googleapis/rpc/code
 google.golang.org/genproto/googleapis/rpc/errdetails
 google.golang.org/genproto/googleapis/rpc/status
-# google.golang.org/grpc v1.56.1
+# google.golang.org/grpc v1.56.3
 ## explicit; go 1.17
 google.golang.org/grpc
 google.golang.org/grpc/attributes