v1.18.0

Changes by Kind

Bug or Regression

• Fixes revision timeout defaulting when identical values are present in timeout settings. (#15617, @skonto)

Uncategorized

• Add the ability to use mountPropagation for volumeMounts, gated under kubernetes.podspec-volumes-mount-propagation (#15758, @elijah-rou)
• Adding support for CSI (Container Storage Interface) volumes. This feature allows users to mount CSI-compatible storage volumes into their Knative service containers. It enables integration with enterprise storage solutions and cloud provider storage services that implement the CSI specification. The feature is behind the flag kubernetes.podspec-volumes-csi. (#15815, @mwritescode)
• Autoscaling: ignore ScaleDownDelay if the revision is not reachable (#15831, @scottjmaddox)
• Bump go-containerregistry to address issues with tag to digest resolution on EKS (#15754, @dprotaso)
• Fix golangci exclude config (#15775, @dsimansk)
• Kubernetes min version is now v1.31 (#15774, @dprotaso)
• Minimum Kubernetes version is now v1.31 (#15777, @dprotaso)
• Support exec readiness probes for sidecar containers (#15773, @flomedja)

Dependencies

Added

• github.com/containerd/log: v0.1.0
• github.com/distribution/reference: v0.6.0
• github.com/envoyproxy/go-control-plane/envoy: v1.32.4
• github.com/envoyproxy/go-control-plane/ratelimit: v0.1.0
• github.com/magefile/mage: v1.14.0
• github.com/moby/docker-image-spec: v1.3.1
• go.opentelemetry.io/auto/sdk: v1.1.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.33.0

Changed

• cel.dev/expr: v0.16.2 → v0.19.1
• cloud.google.com/go/compute/metadata: v0.5.2 → v0.6.0
• github.com/Azure/go-autorest/autorest/adal: v0.9.23 → v0.9.24
• github.com/Azure/go-autorest/autorest/azure/auth: v0.5.11 → v0.5.13
• github.com/Azure/go-autorest/autorest/azure/cli: v0.4.6 → v0.4.7
• github.com/Azure/go-autorest/autorest/date: v0.3.0 → v0.3.1
• github.com/Azure/go-autorest/autorest: v0.11.29 → v0.11.30
• github.com/Azure/go-autorest/logger: v0.2.1 → v0.2.2
• github.com/Azure/go-autorest/tracing: v0.6.0 → v0.6.1
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.24.2 → v1.25.0
• github.com/Microsoft/go-winio: v0.6.0 → v0.6.2
• github.com/aws/aws-sdk-go-v2/config: v1.27.36 → v1.29.6
• github.com/aws/aws-sdk-go-v2/credentials: v1.17.34 → v1.17.59
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.16.14 → v1.16.28
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.3.18 → v1.3.32
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.6.18 → v2.6.32
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.8.1 → v1.8.2
• github.com/aws/aws-sdk-go-v2/service/ecr: v1.17.18 → v1.40.3
• github.com/aws/aws-sdk-go-v2/service/ecrpublic: v1.13.17 → v1.31.2
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.11.5 → v1.12.2
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.11.20 → v1.12.13
• github.com/aws/aws-sdk-go-v2/service/sso: v1.23.0 → v1.24.15
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.27.0 → v1.28.14
• github.com/aws/aws-sdk-go-v2/service/sts: v1.31.0 → v1.33.14
• github.com/aws/aws-sdk-go-v2: v1.31.0 → v1.36.1
• github.com/aws/smithy-go: v1.21.0 → v1.22.2
• github.com/awslabs/amazon-ecr-credential-helper/ecr-login: a250ad2 → d2398ba
• github.com/chrismellard/docker-credential-acr-env: e883f69 → 82a0ddb
• github.com/cncf/xds/go: b4127c9 → cff3c89
• github.com/containerd/stargz-snapshotter/estargz: v0.12.1 → v0.16.3
• github.com/cpuguy83/go-md2man/v2: v2.0.2 → v2.0.6
• github.com/danieljoos/wincred: v1.1.2 → v1.2.1
• github.com/docker/cli: v20.10.20+incompatible → v27.5.1+incompatible
• github.com/docker/distribution: v2.8.2+incompatible → v2.8.3+incompatible
• github.com/docker/docker-credential-helpers: v0.7.0 → v0.8.2
• github.com/docker/docker: v25.0.5+incompatible → v27.5.0+incompatible
• github.com/docker/go-connections: v0.4.0 → v0.5.0
• github.com/envoyproxy/go-control-plane: v0.13.1 → v0.13.4
• github.com/envoyproxy/protoc-gen-validate: v1.1.0 → v1.2.1
• github.com/evanphx/json-patch/v5: v5.9.0 → v5.9.11
• github.com/golang-jwt/jwt/v4: v4.5.0 → v4.5.1
• github.com/golang/glog: v1.2.2 → v1.2.4
• github.com/google/cel-go: v0.20.1 → v0.22.0
• github.com/google/gnostic-models: v0.6.8 → v0.6.9
• github.com/google/go-cmp: v0.6.0 → v0.7.0
• github.com/google/go-containerregistry/pkg/authn/k8schain: 3624968 → c4dd792
• github.com/google/go-containerregistry/pkg/authn/kubernetes: 3624968 → c4dd792
• github.com/google/go-containerregistry: v0.13.0 → v0.20.3
• github.com/google/pprof: 813a5fb → d1b30fe
• github.com/gregjones/httpcache: 9cad4c3 → 901d907
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.21.0 → v2.26.1
• github.com/jessevdk/go-flags: v1.4.0 → v1.6.1
• github.com/jonboulle/clockwork: v0.2.2 → v0.4.0
• github.com/klauspost/compress: v1.17.9 → v1.17.11
• github.com/magiconair/properties: v1.8.4 → v1.8.5
• github.com/mailru/easyjson: v0.7.7 → v0.9.0
• github.com/moby/spdystream: v0.4.0 → v0.5.0
• github.com/moby/term: [9d4ed18 → 1aeaba8](https://gith...

v1.16.3

What's Changed

• [release-1.16] Upgrade to latest dependencies by @knative-automation in #15794

Full Changelog: knative-v1.16.2...knative-v1.16.3

v1.16.2

What's Changed

• [release-1.16] Fix configuration timeout defaulting by @knative-prow-robot in #15721

Full Changelog: knative-v1.16.1...knative-v1.16.2

v1.17.0

Changes

• Adding support for the "hostPath" volume type. The feature allows users to mount directories from the host node's filesystem into their Knative service containers. It enables access to local storage on the node, facilitating use cases such as accessing node-specific data or utilizing local caches. The feature is behind the flag kubernetes.podspec-volumes-hostpath. (#15648, @amarflybot)
• Fixes previously supported probe syntax without a leading slash. (#15681, @skonto)
• Fixes revision timeout defaulting when identical values are present in timeout settings. (#15617, @skonto)
• A revision is now set to ContainerHealthy=True when it has ready replicas (#15503, @SaschaSchwarze0)
• Add default container annotation to Pods created by the reconciler (#15694, @konstfish)
• Allow explicitly setting containers.securityContext.privileged to false (#15643, @KapilSareen)
• Fixes a problem in configuration reconciliation where labeler creates a different order of the route names listed via the annotation serving.knative.dev/routes compared to the configuration reconciler. (#15601, @skonto)
• Kubernetes Deployments created for a Knative Revision are not configured with revisionHistoryLimit=0 which saves a lot of space in your Kubernetes database if you have a lot of Knative Services that are not updated while you regularly update Knative itself and pick up new queue-proxy images. (#15698, @SaschaSchwarze0)

Dependencies

Added

• cloud.google.com/go/longrunning: v0.5.6
• cloud.google.com/go/translate: v1.10.3
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.14.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.7.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.10.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/dns/armdns: v1.2.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.2
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.24.2
• github.com/Khan/genqlient: v0.7.0
• github.com/Venafi/vcert/v5: v5.7.1
• github.com/antlr4-go/antlr/v4: v4.13.0
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.11.5
• github.com/aws/aws-sdk-go-v2/service/route53: v1.44.0
• github.com/frankban/quicktest: v1.14.6
• github.com/go-http-utils/headers: fed159e
• github.com/go-jose/go-jose/v4: v4.0.2
• github.com/golang-jwt/jwt/v5: v5.2.1
• github.com/kylelemons/godebug: v1.1.0
• github.com/pkg/browser: 5ac0b6a
• github.com/sosodev/duration: v1.3.1
• github.com/vektah/gqlparser/v2: v2.5.15
• go.opentelemetry.io/contrib/detectors/gcp: v1.31.0
• go.opentelemetry.io/otel/sdk/metric: v1.31.0
• google.golang.org/grpc/cmd/protoc-gen-go-grpc: v1.3.0
• gopkg.in/evanphx/json-patch.v4: v4.12.0

Changed

• cel.dev/expr: v0.16.0 → v0.16.2
• cloud.google.com/go/auth/oauth2adapt: v0.2.2 → v0.2.4
• cloud.google.com/go/auth: v0.5.1 → v0.9.4
• cloud.google.com/go/compute/metadata: v0.5.0 → v0.5.2
• cloud.google.com/go/compute: v1.23.0 → v1.10.0
• cloud.google.com/go: v0.114.0 → v0.115.1
• github.com/aws/aws-sdk-go-v2/config: v1.17.8 → v1.27.36
• github.com/aws/aws-sdk-go-v2/credentials: v1.12.21 → v1.17.34
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.12.17 → v1.16.14
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.1.23 → v1.3.18
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.4.17 → v2.6.18
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.3.24 → v1.8.1
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.9.17 → v1.11.20
• github.com/aws/aws-sdk-go-v2/service/sso: v1.11.23 → v1.23.0
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.13.6 → v1.27.0
• github.com/aws/aws-sdk-go-v2/service/sts: v1.16.19 → v1.31.0
• github.com/aws/aws-sdk-go-v2: v1.16.16 → v1.31.0
• github.com/aws/smithy-go: v1.13.3 → v1.21.0
• github.com/cenkalti/backoff/v4: v4.2.1 → v4.3.0
• github.com/cert-manager/cert-manager: v1.13.3 → v1.16.3
• github.com/cncf/xds/go: 024c85f → b4127c9
• github.com/digitalocean/godo: v1.102.1 → v1.125.0
• github.com/envoyproxy/go-control-plane: v0.13.0 → v0.13.1
• github.com/fatih/color: v1.15.0 → v1.16.0
• github.com/fxamacker/cbor/v2: v2.6.0 → v2.7.0
• github.com/go-asn1-ber/asn1-ber: v1.5.4 → v1.5.6
• github.com/go-ldap/ldap/v3: v3.4.5 → v3.4.8
• github.com/go-logr/zapr: v1.2.4 → v1.3.0
• github.com/google/cel-go: v0.17.8 → v0.20.1
• github.com/google/go-pkcs11: c6f7932 → v0.3.0
• github.com/google/s2a-go: v0.1.7 → v0.1.8
• github.com/googleapis/enterprise-certificate-proxy: v0.3.2 → v0.3.4
• github.com/googleapis/gax-go/v2: v2.12.4 → v2.13.0
• github.com/hashicorp/go-retryablehttp: v0.7.4 → v0.7.7
• github.com/hashicorp/go-secure-stdlib/parseutil: v0.1.7 → v0.1.8
• github.com/hashicorp/go-sockaddr: v1.0.2 → v1.0.6
• github.com/hashicorp/vault/api: v1.10.0 → v1.15.0
• github.com/hashicorp/vault/sdk: v0.10.0 → v0.14.0
• github.com/klauspost/compress: v1.17.8 → v1.17.9
• github.com/mattn/go-isatty: v0.0.17 → v0.0.20
• github.com/miekg/dns: v1.1.61 → v1.1.62
• github.com/moby/spdystream: v0.2.0 → v0.4.0
• github.com/onsi/ginkgo/v2: v2.20.0 → v2.19.0
• github.com/onsi/gomega: v1.34.1 → v1.33.1
• github.com/prometheus/client_golang: v1.19.1 → v1.20.4
• github.com/spf13/cobra: v1.7.0 → v1.8.1
• github.com/stoewer/go-strcase: v1.2.0 → v1.3.0
• github.com/stretchr/objx: v0.5.0 → v0.5.2
• github.com/youmark/pkcs8: 1326539 → 3c2c787
• go.etcd.io/bbolt: v1.3.8 → v1.3.9
• go.etcd.io/etcd/api/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/pkg/v3: v3.5.10 → v3.5.14
• go...

v1.15.3

What's Changed

• Fix deepcopy gen by @skonto in #15493
• Fix GO-2024-2659 by @knative-prow-robot in #15548
• Fix configuration metadata inconsistency by @knative-prow-robot in #15651
• Pin version of the chainguard kind setup action by @knative-prow-robot in #15714
• Ensure ContainerHealthy condition is set back to True by @knative-prow-robot in #15713
• Fix configuration timeout defaulting by @knative-prow-robot in #15722
• Upgrade the hack tool to fix the patch release issue by @houshengbo in #15724

Full Changelog: knative-v1.15.2...knative-v1.15.3

v1.16.1

What's Changed

• [release-1.16] Fix configuration metadata inconsistency by @knative-prow-robot in #15650
• [release-1.16] Pin version of the chainguard kind setup action by @knative-prow-robot in #15693
• [release-1.16] Upgrade to latest dependencies by @knative-automation in #15692
• [release-1.16] Upgrade to latest dependencies by @knative-automation in #15704
• [release-1.16] Ensure ContainerHealthy condition is set back to True by @knative-prow-robot in #15712

Full Changelog: knative-v1.16.0...knative-v1.16.1

v1.16.0

Changes

• Allow hostPID, hostNetwork and HostIPC to be set for a Knative Service (feature flags: kubernetes.podspec-hostpid, kubernetes.podspec-hostnetwrok, kubernetes.podspec-hostipc). All features are disabled by default. (#15414, @skonto)
• Fixes Bug preventing the correct configuration of cert manager (#15434, @mstein11)
• Support s390x/ppc when building our controllers (#15407, @dprotaso)

Dependencies

Added

• github.com/fxamacker/cbor/v2: v2.6.0
• github.com/go-task/slim-sprig/v3: v3.0.0
• github.com/planetscale/vtprotobuf: 0393e58
• github.com/x448/float16: v0.8.4
• k8s.io/gengo/v2: 51d4e06

Changed

• cel.dev/expr: v0.15.0 → v0.16.0
• cloud.google.com/go/compute/metadata: v0.3.0 → v0.5.0
• github.com/asaskevich/govalidator: f61b66f → a9d515a
• github.com/c2h5oh/datasize: 859f65c → aa82cc1
• github.com/cncf/xds/go: 555b57e → 024c85f
• github.com/docker/docker: v25.0.1+incompatible → v25.0.5+incompatible
• github.com/emicklei/go-restful/v3: v3.11.0 → v3.12.1
• github.com/envoyproxy/go-control-plane: v0.12.0 → v0.13.0
• github.com/envoyproxy/protoc-gen-validate: v1.0.4 → v1.1.0
• github.com/evanphx/json-patch: v5.6.0+incompatible → v5.9.0+incompatible
• github.com/go-logr/logr: v1.4.1 → v1.4.2
• github.com/go-openapi/jsonpointer: v0.20.2 → v0.21.0
• github.com/go-openapi/jsonreference: v0.20.4 → v0.21.0
• github.com/go-openapi/swag: v0.22.7 → v0.23.0
• github.com/gobuffalo/flect: v1.0.2 → v1.0.3
• github.com/golang/glog: v1.2.1 → v1.2.2
• github.com/google/cel-go: v0.17.7 → v0.17.8
• github.com/google/pprof: 4bb14d4 → 813a5fb
• github.com/gorilla/websocket: v1.5.0 → v1.5.3
• github.com/grafana/regexp: 6b5c0a4 → a468a5b
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.16.0 → v2.21.0
• github.com/imdario/mergo: v0.3.12 → v0.3.16
• github.com/miekg/dns: v1.1.56 → v1.1.61
• github.com/onsi/ginkgo/v2: v2.13.0 → v2.20.0
• github.com/onsi/gomega: v1.29.0 → v1.34.1
• github.com/prometheus/common: v0.54.0 → v0.55.0
• github.com/prometheus/procfs: v0.12.0 → v0.15.1
• github.com/prometheus/prometheus: v0.47.0 → v0.53.1
• github.com/rogpeppe/go-internal: v1.11.0 → v1.12.0
• github.com/rs/dnscache: e0241e3 → fc85eb6
• github.com/stretchr/testify: v1.8.4 → v1.9.0
• github.com/tsenart/vegeta/v12: v12.11.1 → v12.12.0
• go.uber.org/automaxprocs: v1.5.3 → v1.6.0
• golang.org/x/crypto: v0.25.0 → v0.28.0
• golang.org/x/exp: 9212866 → 0cdaa3a
• golang.org/x/mod: v0.19.0 → v0.21.0
• golang.org/x/net: v0.27.0 → v0.30.0
• golang.org/x/oauth2: v0.21.0 → v0.22.0
• golang.org/x/sync: v0.7.0 → v0.8.0
• golang.org/x/sys: v0.22.0 → v0.26.0
• golang.org/x/term: v0.22.0 → v0.25.0
• golang.org/x/text: v0.16.0 → v0.19.0
• golang.org/x/time: v0.5.0 → v0.6.0
• golang.org/x/tools: v0.23.0 → v0.26.0
• golang.org/x/xerrors: 04be3eb → 5ec99f8
• google.golang.org/genproto/googleapis/api: ef581f9 → ddb44da
• google.golang.org/genproto/googleapis/rpc: 5315273 → ddb44da
• google.golang.org/grpc: v1.65.0 → v1.67.1
• google.golang.org/protobuf: v1.34.1 → v1.35.1
• k8s.io/api: v0.29.2 → v0.30.3
• k8s.io/apiextensions-apiserver: v0.29.2 → v0.30.3
• k8s.io/apimachinery: v0.29.2 → v0.30.3
• k8s.io/apiserver: v0.29.2 → v0.30.3
• k8s.io/client-go: v0.29.2 → v0.30.3
• k8s.io/code-generator: v0.29.2 → v0.30.3
• k8s.io/component-base: v0.29.2 → v0.30.3
• k8s.io/gengo: f967bbe → a0386bf
• k8s.io/klog/v2: v2.120.1 → v2.130.1
• k8s.io/kms: v0.29.2 → v0.30.3
• k8s.io/kube-openapi: 2dd684a → 8e68654
• k8s.io/utils: e7106e6 → 18e509b
• knative.dev/caching: 989f54c → 41bbaf9
• knative.dev/hack: b979959 → 05b2fb3
• knative.dev/networking: bab7f2a → 60e29ff
• knative.dev/pkg: 4355f0c → 9b9d535
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.28.0 → v0.29.0

Removed

Nothing has changed.

v1.14.2

Note

If you're using Knative Serving with Istio this release requires Istio 1.20+

What's Changed

• [release-1.14] fix cluster-local routes being stalled when external-domain-tls is enabled by @knative-prow-robot in #15243
• [release-1.14] Add pod anti affinity rules to activator component by @knative-prow-robot in #15244
• [release-1.14] fix: Fixed liveness periodseconds to 10 so that crashloopback off doe… by @knative-prow-robot in #15257
• [release-1.14] Drop the k8s service name from kubectl get revision output by @knative-prow-robot in #15262

Full Changelog: knative-v1.14.0...knative-v1.14.1

v1.15.2

What's Changed

• [release-1.15] Fix bug in cert manager config by @knative-prow-robot in #15437

Full Changelog: knative-v1.15.1...knative-v1.15.2

v1.15.1

What's Changed

• [release-1.15] Use a different 'static' image that supports s390x and ppc by @knative-prow-robot in #15409
• [release-1.15] Clean up old leases @skonto in #15418 #15424

Full Changelog: knative-v1.15.0...knative-v1.15.1