From 66cebf4bb9a68948b9106b2fcd1be46e6b776a08 Mon Sep 17 00:00:00 2001 From: Knative Automation Date: Tue, 23 Jul 2024 13:06:22 -0400 Subject: [PATCH] upgrade to latest dependencies (#1840) bumping knative.dev/networking 370ddbb...bab7f2a: > bab7f2a upgrade to latest dependencies (# 992) bumping knative.dev/serving fea0e7a...34cef98: > 34cef98 Update net-contour nightly (# 15400) > 493a456 Update net-kourier nightly (# 15402) > 948f04a Update net-istio nightly (# 15401) > 8a99187 upgrade to latest dependencies (# 15399) bumping knative.dev/eventing 2cc0a5b...c3baeda: > c3baeda mt-broker ingress: Reject unauthorized requests (# 8105) > 7c1c46c [main] Upgrade to latest dependencies (# 8109) > 1e4183f Added EventPolicy Webhook (# 8091) Signed-off-by: Knative Automation --- go.mod | 6 +++--- go.sum | 12 ++++++------ .../apis/eventing/v1alpha1/eventpolicy_validation.go | 8 ++++++++ vendor/modules.txt | 6 +++--- 4 files changed, 20 insertions(+), 12 deletions(-) diff --git a/go.mod b/go.mod index ea11dec550..7ec7fc7d67 100644 --- a/go.mod +++ b/go.mod @@ -22,10 +22,10 @@ require ( k8s.io/code-generator v0.29.2 k8s.io/utils v0.0.0-20240102154912-e7106e64919e knative.dev/caching v0.0.0-20240716132144-989f54c83776 - knative.dev/eventing v0.41.1-0.20240716144258-2cc0a5bedff5 + knative.dev/eventing v0.41.1-0.20240723091907-c3baeda069fc knative.dev/hack v0.0.0-20240704013904-b9799599afcf knative.dev/pkg v0.0.0-20240716082220-4355f0c73608 - knative.dev/serving v0.41.1-0.20240716005350-fea0e7a481ea + knative.dev/serving v0.41.1-0.20240722152628-34cef9880402 sigs.k8s.io/yaml v1.4.0 ) @@ -145,7 +145,7 @@ require ( k8s.io/gengo v0.0.0-20240129211411-f967bbeff4b4 // indirect k8s.io/klog/v2 v2.120.1 // indirect k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 // indirect - knative.dev/networking v0.0.0-20240704015122-370ddbb8fd13 // indirect + knative.dev/networking v0.0.0-20240716111826-bab7f2a3e556 // indirect sigs.k8s.io/controller-runtime v0.7.2 // indirect sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect diff --git a/go.sum b/go.sum index 752c999e97..c253a62d04 100644 --- a/go.sum +++ b/go.sum @@ -1361,16 +1361,16 @@ k8s.io/utils v0.0.0-20240102154912-e7106e64919e h1:eQ/4ljkx21sObifjzXwlPKpdGLrCf k8s.io/utils v0.0.0-20240102154912-e7106e64919e/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= knative.dev/caching v0.0.0-20240716132144-989f54c83776 h1:2nINnWuXtb9e2nG/EJxSCeghcmu6qmvmomJ7woiP5Is= knative.dev/caching v0.0.0-20240716132144-989f54c83776/go.mod h1:Uj74eO9rLiK1eb8wmDBED1hJBZQ7MJ9cvq/d8Ktsm3c= -knative.dev/eventing v0.41.1-0.20240716144258-2cc0a5bedff5 h1:R2GqnGZ/pqwQH4qVnc8Luc76gsHs08h/LF5L+7eAe7E= -knative.dev/eventing v0.41.1-0.20240716144258-2cc0a5bedff5/go.mod h1:GuJo16nQITgEy7HLt0bwX7h1lAKteF3SD0QxUTBGkAM= +knative.dev/eventing v0.41.1-0.20240723091907-c3baeda069fc h1:w5eRoRdTeaKAwWryIezRvY/ut1bBiZ0L5QMaAd9ZUtE= +knative.dev/eventing v0.41.1-0.20240723091907-c3baeda069fc/go.mod h1:hW5BMYcihtCelT9pqaMtK8gmNOo1ybxcigjBY+/fU+k= knative.dev/hack v0.0.0-20240704013904-b9799599afcf h1:n92FmZRywgtHso7pFAku7CW0qvRAs1hXtMQqO0R6eiE= knative.dev/hack v0.0.0-20240704013904-b9799599afcf/go.mod h1:yk2OjGDsbEnQjfxdm0/HJKS2WqTLEFg/N6nUs6Rqx3Q= -knative.dev/networking v0.0.0-20240704015122-370ddbb8fd13 h1:ik1TeuFTNAweZiQhUZKnKjE27Imk2vnJXMyanLzcTzo= -knative.dev/networking v0.0.0-20240704015122-370ddbb8fd13/go.mod h1:x0GM7pp5hLZ0OBpJvHsJxMMJ0XKYWW3PQHCMGBlo9Ls= +knative.dev/networking v0.0.0-20240716111826-bab7f2a3e556 h1:9OTyJkrjiFh/burZiti3WucGv8Qtt91VJTnXfO5dC2g= +knative.dev/networking v0.0.0-20240716111826-bab7f2a3e556/go.mod h1:1PosUDkXqoHNzYxtLIwa7LFqSsIXBShHOseAb6XBeEU= knative.dev/pkg v0.0.0-20240716082220-4355f0c73608 h1:BOiRzcnRS9Z5ruxlCiS/K1/Hb5bUN0X4W3xCegdcYQE= knative.dev/pkg v0.0.0-20240716082220-4355f0c73608/go.mod h1:M67lDZ4KbltYSon0Ox4/6qjlZNOIXW4Ldequ81yofbw= -knative.dev/serving v0.41.1-0.20240716005350-fea0e7a481ea h1:ycB8DgulgHYRezLmvlh2Pk46OvQCf6C5UtA8Y2lM/Ls= -knative.dev/serving v0.41.1-0.20240716005350-fea0e7a481ea/go.mod h1:kjO+YscsftZ1aJsrcYkaNMerp3Mm1PLCJhOzOG43HgY= +knative.dev/serving v0.41.1-0.20240722152628-34cef9880402 h1:7ZQE/zLxzntDg8Q1FB+mpgWVO0fsO7W27wNLMzR+ymE= +knative.dev/serving v0.41.1-0.20240722152628-34cef9880402/go.mod h1:3cgU8/864RcqA0ZPrc3jFcmS3uJL/mOlUZiYsXonwaE= nhooyr.io/websocket v1.8.6/go.mod h1:B70DZP8IakI65RVQ51MsWP/8jndNma26DVA/nFSCgW0= pgregory.net/rapid v1.1.0 h1:CMa0sjHSru3puNx+J0MIAuiiEV4N0qj8/cMWGBBCsjw= pgregory.net/rapid v1.1.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04= diff --git a/vendor/knative.dev/eventing/pkg/apis/eventing/v1alpha1/eventpolicy_validation.go b/vendor/knative.dev/eventing/pkg/apis/eventing/v1alpha1/eventpolicy_validation.go index 0c267b3196..5f05c240df 100644 --- a/vendor/knative.dev/eventing/pkg/apis/eventing/v1alpha1/eventpolicy_validation.go +++ b/vendor/knative.dev/eventing/pkg/apis/eventing/v1alpha1/eventpolicy_validation.go @@ -20,10 +20,18 @@ import ( "context" "strings" + "knative.dev/eventing/pkg/apis/feature" "knative.dev/pkg/apis" ) func (ep *EventPolicy) Validate(ctx context.Context) *apis.FieldError { + // To not allow creation or spec updates of EventPolicy CRs + // if the oidc-authentication feature is not enabled + if apis.IsInCreate(ctx) || (apis.IsInUpdate(ctx) && apis.IsInSpec(ctx)) { + if !feature.FromContext(ctx).IsOIDCAuthentication() { + return apis.ErrGeneric("oidc-authentication feature not enabled") + } + } return ep.Spec.Validate(ctx).ViaField("spec") } diff --git a/vendor/modules.txt b/vendor/modules.txt index 8fa1a41886..ac9f87c670 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -1323,7 +1323,7 @@ k8s.io/utils/trace ## explicit; go 1.22 knative.dev/caching/pkg/apis/caching knative.dev/caching/pkg/apis/caching/v1alpha1 -# knative.dev/eventing v0.41.1-0.20240716144258-2cc0a5bedff5 +# knative.dev/eventing v0.41.1-0.20240723091907-c3baeda069fc ## explicit; go 1.22 knative.dev/eventing/pkg/apis/config knative.dev/eventing/pkg/apis/duck @@ -1434,7 +1434,7 @@ knative.dev/eventing/test/upgrade/prober/wathola/sender # knative.dev/hack v0.0.0-20240704013904-b9799599afcf ## explicit; go 1.18 knative.dev/hack -# knative.dev/networking v0.0.0-20240704015122-370ddbb8fd13 +# knative.dev/networking v0.0.0-20240716111826-bab7f2a3e556 ## explicit; go 1.22 knative.dev/networking/pkg knative.dev/networking/pkg/apis/networking @@ -1533,7 +1533,7 @@ knative.dev/pkg/webhook knative.dev/pkg/webhook/certificates knative.dev/pkg/webhook/certificates/resources knative.dev/pkg/webhook/resourcesemantics/conversion -# knative.dev/serving v0.41.1-0.20240716005350-fea0e7a481ea +# knative.dev/serving v0.41.1-0.20240722152628-34cef9880402 ## explicit; go 1.22 knative.dev/serving/pkg/apis/autoscaling knative.dev/serving/pkg/apis/autoscaling/v1alpha1