v1.17.0

Changes

• Adding support for the "hostPath" volume type. The feature allows users to mount directories from the host node's filesystem into their Knative service containers. It enables access to local storage on the node, facilitating use cases such as accessing node-specific data or utilizing local caches. The feature is behind the flag kubernetes.podspec-volumes-hostpath. (#15648, @amarflybot)
• Fixes previously supported probe syntax without a leading slash. (#15681, @skonto)
• Fixes revision timeout defaulting when identical values are present in timeout settings. (#15617, @skonto)
• A revision is now set to ContainerHealthy=True when it has ready replicas (#15503, @SaschaSchwarze0)
• Add default container annotation to Pods created by the reconciler (#15694, @konstfish)
• Allow explicitly setting containers.securityContext.privileged to false (#15643, @KapilSareen)
• Fixes a problem in configuration reconciliation where labeler creates a different order of the route names listed via the annotation serving.knative.dev/routes compared to the configuration reconciler. (#15601, @skonto)
• Kubernetes Deployments created for a Knative Revision are not configured with revisionHistoryLimit=0 which saves a lot of space in your Kubernetes database if you have a lot of Knative Services that are not updated while you regularly update Knative itself and pick up new queue-proxy images. (#15698, @SaschaSchwarze0)

Dependencies

Added

• cloud.google.com/go/longrunning: v0.5.6
• cloud.google.com/go/translate: v1.10.3
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.14.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.7.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.10.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/dns/armdns: v1.2.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.2
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.24.2
• github.com/Khan/genqlient: v0.7.0
• github.com/Venafi/vcert/v5: v5.7.1
• github.com/antlr4-go/antlr/v4: v4.13.0
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.11.5
• github.com/aws/aws-sdk-go-v2/service/route53: v1.44.0
• github.com/frankban/quicktest: v1.14.6
• github.com/go-http-utils/headers: fed159e
• github.com/go-jose/go-jose/v4: v4.0.2
• github.com/golang-jwt/jwt/v5: v5.2.1
• github.com/kylelemons/godebug: v1.1.0
• github.com/pkg/browser: 5ac0b6a
• github.com/sosodev/duration: v1.3.1
• github.com/vektah/gqlparser/v2: v2.5.15
• go.opentelemetry.io/contrib/detectors/gcp: v1.31.0
• go.opentelemetry.io/otel/sdk/metric: v1.31.0
• google.golang.org/grpc/cmd/protoc-gen-go-grpc: v1.3.0
• gopkg.in/evanphx/json-patch.v4: v4.12.0

Changed

• cel.dev/expr: v0.16.0 → v0.16.2
• cloud.google.com/go/auth/oauth2adapt: v0.2.2 → v0.2.4
• cloud.google.com/go/auth: v0.5.1 → v0.9.4
• cloud.google.com/go/compute/metadata: v0.5.0 → v0.5.2
• cloud.google.com/go/compute: v1.23.0 → v1.10.0
• cloud.google.com/go: v0.114.0 → v0.115.1
• github.com/aws/aws-sdk-go-v2/config: v1.17.8 → v1.27.36
• github.com/aws/aws-sdk-go-v2/credentials: v1.12.21 → v1.17.34
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.12.17 → v1.16.14
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.1.23 → v1.3.18
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.4.17 → v2.6.18
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.3.24 → v1.8.1
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.9.17 → v1.11.20
• github.com/aws/aws-sdk-go-v2/service/sso: v1.11.23 → v1.23.0
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.13.6 → v1.27.0
• github.com/aws/aws-sdk-go-v2/service/sts: v1.16.19 → v1.31.0
• github.com/aws/aws-sdk-go-v2: v1.16.16 → v1.31.0
• github.com/aws/smithy-go: v1.13.3 → v1.21.0
• github.com/cenkalti/backoff/v4: v4.2.1 → v4.3.0
• github.com/cert-manager/cert-manager: v1.13.3 → v1.16.3
• github.com/cncf/xds/go: 024c85f → b4127c9
• github.com/digitalocean/godo: v1.102.1 → v1.125.0
• github.com/envoyproxy/go-control-plane: v0.13.0 → v0.13.1
• github.com/fatih/color: v1.15.0 → v1.16.0
• github.com/fxamacker/cbor/v2: v2.6.0 → v2.7.0
• github.com/go-asn1-ber/asn1-ber: v1.5.4 → v1.5.6
• github.com/go-ldap/ldap/v3: v3.4.5 → v3.4.8
• github.com/go-logr/zapr: v1.2.4 → v1.3.0
• github.com/google/cel-go: v0.17.8 → v0.20.1
• github.com/google/go-pkcs11: c6f7932 → v0.3.0
• github.com/google/s2a-go: v0.1.7 → v0.1.8
• github.com/googleapis/enterprise-certificate-proxy: v0.3.2 → v0.3.4
• github.com/googleapis/gax-go/v2: v2.12.4 → v2.13.0
• github.com/hashicorp/go-retryablehttp: v0.7.4 → v0.7.7
• github.com/hashicorp/go-secure-stdlib/parseutil: v0.1.7 → v0.1.8
• github.com/hashicorp/go-sockaddr: v1.0.2 → v1.0.6
• github.com/hashicorp/vault/api: v1.10.0 → v1.15.0
• github.com/hashicorp/vault/sdk: v0.10.0 → v0.14.0
• github.com/klauspost/compress: v1.17.8 → v1.17.9
• github.com/mattn/go-isatty: v0.0.17 → v0.0.20
• github.com/miekg/dns: v1.1.61 → v1.1.62
• github.com/moby/spdystream: v0.2.0 → v0.4.0
• github.com/onsi/ginkgo/v2: v2.20.0 → v2.19.0
• github.com/onsi/gomega: v1.34.1 → v1.33.1
• github.com/prometheus/client_golang: v1.19.1 → v1.20.4
• github.com/spf13/cobra: v1.7.0 → v1.8.1
• github.com/stoewer/go-strcase: v1.2.0 → v1.3.0
• github.com/stretchr/objx: v0.5.0 → v0.5.2
• github.com/youmark/pkcs8: 1326539 → 3c2c787
• go.etcd.io/bbolt: v1.3.8 → v1.3.9
• go.etcd.io/etcd/api/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/pkg/v3: v3.5.10 → v3.5.14
• go...

v1.15.3

What's Changed

• Fix deepcopy gen by @skonto in #15493
• Fix GO-2024-2659 by @knative-prow-robot in #15548
• Fix configuration metadata inconsistency by @knative-prow-robot in #15651
• Pin version of the chainguard kind setup action by @knative-prow-robot in #15714
• Ensure ContainerHealthy condition is set back to True by @knative-prow-robot in #15713
• Fix configuration timeout defaulting by @knative-prow-robot in #15722
• Upgrade the hack tool to fix the patch release issue by @houshengbo in #15724

Full Changelog: knative-v1.15.2...knative-v1.15.3

v1.16.1

What's Changed

• [release-1.16] Fix configuration metadata inconsistency by @knative-prow-robot in #15650
• [release-1.16] Pin version of the chainguard kind setup action by @knative-prow-robot in #15693
• [release-1.16] Upgrade to latest dependencies by @knative-automation in #15692
• [release-1.16] Upgrade to latest dependencies by @knative-automation in #15704
• [release-1.16] Ensure ContainerHealthy condition is set back to True by @knative-prow-robot in #15712

Full Changelog: knative-v1.16.0...knative-v1.16.1

v1.16.0

Changes

• Allow hostPID, hostNetwork and HostIPC to be set for a Knative Service (feature flags: kubernetes.podspec-hostpid, kubernetes.podspec-hostnetwrok, kubernetes.podspec-hostipc). All features are disabled by default. (#15414, @skonto)
• Fixes Bug preventing the correct configuration of cert manager (#15434, @mstein11)
• Support s390x/ppc when building our controllers (#15407, @dprotaso)

Dependencies

Added

• github.com/fxamacker/cbor/v2: v2.6.0
• github.com/go-task/slim-sprig/v3: v3.0.0
• github.com/planetscale/vtprotobuf: 0393e58
• github.com/x448/float16: v0.8.4
• k8s.io/gengo/v2: 51d4e06

Changed

• cel.dev/expr: v0.15.0 → v0.16.0
• cloud.google.com/go/compute/metadata: v0.3.0 → v0.5.0
• github.com/asaskevich/govalidator: f61b66f → a9d515a
• github.com/c2h5oh/datasize: 859f65c → aa82cc1
• github.com/cncf/xds/go: 555b57e → 024c85f
• github.com/docker/docker: v25.0.1+incompatible → v25.0.5+incompatible
• github.com/emicklei/go-restful/v3: v3.11.0 → v3.12.1
• github.com/envoyproxy/go-control-plane: v0.12.0 → v0.13.0
• github.com/envoyproxy/protoc-gen-validate: v1.0.4 → v1.1.0
• github.com/evanphx/json-patch: v5.6.0+incompatible → v5.9.0+incompatible
• github.com/go-logr/logr: v1.4.1 → v1.4.2
• github.com/go-openapi/jsonpointer: v0.20.2 → v0.21.0
• github.com/go-openapi/jsonreference: v0.20.4 → v0.21.0
• github.com/go-openapi/swag: v0.22.7 → v0.23.0
• github.com/gobuffalo/flect: v1.0.2 → v1.0.3
• github.com/golang/glog: v1.2.1 → v1.2.2
• github.com/google/cel-go: v0.17.7 → v0.17.8
• github.com/google/pprof: 4bb14d4 → 813a5fb
• github.com/gorilla/websocket: v1.5.0 → v1.5.3
• github.com/grafana/regexp: 6b5c0a4 → a468a5b
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.16.0 → v2.21.0
• github.com/imdario/mergo: v0.3.12 → v0.3.16
• github.com/miekg/dns: v1.1.56 → v1.1.61
• github.com/onsi/ginkgo/v2: v2.13.0 → v2.20.0
• github.com/onsi/gomega: v1.29.0 → v1.34.1
• github.com/prometheus/common: v0.54.0 → v0.55.0
• github.com/prometheus/procfs: v0.12.0 → v0.15.1
• github.com/prometheus/prometheus: v0.47.0 → v0.53.1
• github.com/rogpeppe/go-internal: v1.11.0 → v1.12.0
• github.com/rs/dnscache: e0241e3 → fc85eb6
• github.com/stretchr/testify: v1.8.4 → v1.9.0
• github.com/tsenart/vegeta/v12: v12.11.1 → v12.12.0
• go.uber.org/automaxprocs: v1.5.3 → v1.6.0
• golang.org/x/crypto: v0.25.0 → v0.28.0
• golang.org/x/exp: 9212866 → 0cdaa3a
• golang.org/x/mod: v0.19.0 → v0.21.0
• golang.org/x/net: v0.27.0 → v0.30.0
• golang.org/x/oauth2: v0.21.0 → v0.22.0
• golang.org/x/sync: v0.7.0 → v0.8.0
• golang.org/x/sys: v0.22.0 → v0.26.0
• golang.org/x/term: v0.22.0 → v0.25.0
• golang.org/x/text: v0.16.0 → v0.19.0
• golang.org/x/time: v0.5.0 → v0.6.0
• golang.org/x/tools: v0.23.0 → v0.26.0
• golang.org/x/xerrors: 04be3eb → 5ec99f8
• google.golang.org/genproto/googleapis/api: ef581f9 → ddb44da
• google.golang.org/genproto/googleapis/rpc: 5315273 → ddb44da
• google.golang.org/grpc: v1.65.0 → v1.67.1
• google.golang.org/protobuf: v1.34.1 → v1.35.1
• k8s.io/api: v0.29.2 → v0.30.3
• k8s.io/apiextensions-apiserver: v0.29.2 → v0.30.3
• k8s.io/apimachinery: v0.29.2 → v0.30.3
• k8s.io/apiserver: v0.29.2 → v0.30.3
• k8s.io/client-go: v0.29.2 → v0.30.3
• k8s.io/code-generator: v0.29.2 → v0.30.3
• k8s.io/component-base: v0.29.2 → v0.30.3
• k8s.io/gengo: f967bbe → a0386bf
• k8s.io/klog/v2: v2.120.1 → v2.130.1
• k8s.io/kms: v0.29.2 → v0.30.3
• k8s.io/kube-openapi: 2dd684a → 8e68654
• k8s.io/utils: e7106e6 → 18e509b
• knative.dev/caching: 989f54c → 41bbaf9
• knative.dev/hack: b979959 → 05b2fb3
• knative.dev/networking: bab7f2a → 60e29ff
• knative.dev/pkg: 4355f0c → 9b9d535
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.28.0 → v0.29.0

Removed

Nothing has changed.

v1.14.2

Note

If you're using Knative Serving with Istio this release requires Istio 1.20+

What's Changed

• [release-1.14] fix cluster-local routes being stalled when external-domain-tls is enabled by @knative-prow-robot in #15243
• [release-1.14] Add pod anti affinity rules to activator component by @knative-prow-robot in #15244
• [release-1.14] fix: Fixed liveness periodseconds to 10 so that crashloopback off doe… by @knative-prow-robot in #15257
• [release-1.14] Drop the k8s service name from kubectl get revision output by @knative-prow-robot in #15262

Full Changelog: knative-v1.14.0...knative-v1.14.1

v1.15.2

What's Changed

• [release-1.15] Fix bug in cert manager config by @knative-prow-robot in #15437

Full Changelog: knative-v1.15.1...knative-v1.15.2

v1.15.1

What's Changed

• [release-1.15] Use a different 'static' image that supports s390x and ppc by @knative-prow-robot in #15409
• [release-1.15] Clean up old leases @skonto in #15418 #15424

Full Changelog: knative-v1.15.0...knative-v1.15.1

v1.15.0

Changes

• A new job is added that will run after upgrades via kubectl to clean up old resources if any. Also can be run in previous versions. (#15312, @skonto)
• Add anti affinity rules to the activator deployment (#15233, @izabelacg)
• Adjust liveness probe to account for stale leases - otherwise webhook would crashloop forever (#15256, @mukulgit123)
• Allow ipv6 address for sslip.io in default-domain Job (#15328, @tcnghia)
• Contour now supports TLS encryption of cluster local routes (#15378, @dprotaso)
• Fix cluster.local Routes not reconciling when external-tls is enabled (#15234, @dprotaso)
• Knative Service now supports setting startup probes in the spec. Please note that this increases the cold-start time of your service (more info in docs). (#15309, @ReToCode)
• Pod anti-affinity rules are set by default for all Knative services. The feature can be deactivated using the property default-affinity-type in the config-deployment configmap. (#15250, @izabelacg)
• Pod runtime-class-names can be set to run Services which matches specified labels with an available RuntimeClass. This feature can be configured with the property runtime-class-name in the config-deployment configmap. (#15271, @BobyMCbobs)
• The net-certmanager controller is now part of the Serving core and specifically of the Serving controller.
  To upgrade from an existing deployment you need to delete the net-certmanager deployment first. (#15066, @skonto)
• kubectl get revision - no longer shows an empty column for K8S Service Name (#15260, @dprotaso)

Dependencies

Added

• cel.dev/expr: v0.15.0
• cloud.google.com/go/auth/oauth2adapt: v0.2.2
• cloud.google.com/go/auth: v0.5.1
• github.com/Azure/go-autorest/autorest/to: v0.4.0
• github.com/Azure/go-autorest/autorest/validation: v0.3.1
• github.com/Azure/go-ntlmssp: 754e693
• github.com/Venafi/vcert/v4: 69f417a
• github.com/akamai/AkamaiOPEN-edgegrid-golang: v1.2.2
• github.com/aws/aws-sdk-go: v1.45.7
• github.com/cenkalti/backoff/v3: v3.2.2
• github.com/cert-manager/cert-manager: v1.13.3
• github.com/cpu/goacmedns: v0.1.1
• github.com/digitalocean/godo: v1.102.1
• github.com/fatih/color: v1.15.0
• github.com/go-asn1-ber/asn1-ber: v1.5.4
• github.com/go-jose/go-jose/v3: v3.0.1
• github.com/go-ldap/ldap/v3: v3.4.5
• github.com/go-logr/zapr: v1.2.4
• github.com/hashicorp/go-cleanhttp: v0.5.2
• github.com/hashicorp/go-retryablehttp: v0.7.4
• github.com/hashicorp/go-rootcerts: v1.0.2
• github.com/hashicorp/go-secure-stdlib/parseutil: v0.1.7
• github.com/hashicorp/go-secure-stdlib/strutil: v0.1.2
• github.com/hashicorp/go-sockaddr: v1.0.2
• github.com/hashicorp/vault/api: v1.10.0
• github.com/hashicorp/vault/sdk: v0.10.0
• github.com/lithammer/dedent: v1.1.0
• github.com/patrickmn/go-cache: v2.1.0+incompatible
• github.com/pavlo-v-chernykh/keystore-go/v4: v4.5.0
• github.com/ryanuber/go-glob: v1.0.0
• github.com/youmark/pkcs8: 1326539
• k8s.io/kube-aggregator: v0.28.1
• sigs.k8s.io/controller-runtime: v0.16.1
• sigs.k8s.io/controller-tools: v0.13.0
• sigs.k8s.io/gateway-api: v0.8.0
• software.sslmate.com/src/go-pkcs12: v0.2.1

Changed

• cloud.google.com/go/compute/metadata: v0.2.3 → v0.3.0
• cloud.google.com/go/compute: v1.24.0 → v1.23.0
• cloud.google.com/go/storage: v1.40.0 → v1.10.0
• cloud.google.com/go: v0.112.1 → v0.114.0
• github.com/Azure/azure-sdk-for-go: v67.0.0+incompatible → v68.0.0+incompatible
• github.com/Azure/go-autorest/autorest/adal: v0.9.21 → v0.9.23
• github.com/Azure/go-autorest/autorest: v0.11.28 → v0.11.29
• github.com/IBM/sarama: v1.40.1 → v1.43.1
• github.com/cespare/xxhash/v2: v2.2.0 → v2.3.0
• github.com/cncf/xds/go: 0fa0005 → 555b57e
• github.com/davecgh/go-spew: v1.1.1 → d8f796a
• github.com/eapache/go-resiliency: v1.3.0 → v1.6.0
• github.com/eapache/go-xerial-snappy: bf00bc1 → c322873
• github.com/evanphx/json-patch: v4.12.0+incompatible → v5.6.0+incompatible
• github.com/go-openapi/jsonpointer: v0.19.6 → v0.20.2
• github.com/go-openapi/jsonreference: v0.20.2 → v0.20.4
• github.com/go-openapi/swag: v0.22.3 → v0.22.7
• github.com/golang/glog: v1.2.0 → v1.2.1
• github.com/google/go-querystring: v1.0.0 → v1.1.0
• github.com/googleapis/gax-go/v2: v2.12.3 → v2.12.4
• github.com/hashicorp/hcl: v1.0.0 → 5
• github.com/jcmturner/gokrb5/v8: v8.4.3 → v8.4.4
• github.com/jmespath/go-jmespath: v0.4.0 → b0104c8
• github.com/klauspost/compress: v1.16.6 → v1.17.8
• github.com/mattn/go-colorable: v0.1.8 → v0.1.13
• github.com/mattn/go-isatty: v0.0.12 → v0.0.17
• github.com/mitchellh/mapstructure: v1.3.3 → v1.5.0
• github.com/openzipkin/zipkin-go: v0.4.2 → v0.4.3
• github.com/pierrec/lz4/v4: v4.1.17 → v4.1.21
• github.com/pierrec/lz4: 473cd7c → v2.6.1+incompatible
• github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
• github.com/prometheus/client_golang: v1.19.0 → v1.19.1
• github.com/prometheus/client_model: v0.6.0 → v0.6.1
• github.com/prometheus/common: v0.52.3 → v0.54.0
• github.com/rabbitmq/amqp091-go: v1.8.1 → v1.9.0
• github.com/rogpeppe/go-internal: v1.10.0 → v1.11.0
• github.com/sirupsen/logrus: v1.9.0 → v1.9.3
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.19.0 → v1.20.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.19.0 → v1.20.0
• go.opentelemetry.io/otel/sdk: v1.21.0 → v1.20.0
• golang.org/x/crypto: v0.22.0 → v0.25.0
• golang.org/x/exp: 613f0c0 → 9212866
• golang.org/x/mod: v0.17.0 → v0.19.0
• golang.org/x/net: v0.24.0 → v0.27.0
• golang.org/x/oauth2: v0.19.0 → v0.21.0
• golang.org/x/sys: v0.19.0 → v0.22.0
• golang.org/x/telemetry: f48c80b → bda5523
• golang.org/x/term: v0.19.0 → v0.22.0
• golang.org/x/text: v0.14.0 → v0.16.0
• golang.org/x/tools: v0.20.0 → v0.23.0
• google.golang.org/api: v0.172.0 → v0.183.0
• google.golang.org/appengine: v1.6.8 → v1.6.7
• google.golang.org/genproto/googleapis/api: 6e1732d → ef581f9
• google.golang.org/genproto/googleapis/bytestream: 94a12d6 → 5315273
• google.golang.org/genproto/googleapis/rpc: 94a12d6 → 5315273
• google.golang.org/genproto: 6ceb2ff → 5315273
• google.golang.org/grpc: v1.63.2 → v1.65.0
• google.golang.org/protobuf: v1.33.0 → v1.34.1
• knative.dev/caching: b...

v1.14.1

Note

If you're using Knative Serving with Istio this release requires Istio 1.20+

What's Changed

• [release-1.14] fix cluster-local routes being stalled when external-domain-tls is enabled by @knative-prow-robot in #15243
• [release-1.14] Add pod anti affinity rules to activator component by @knative-prow-robot in #15244
• [release-1.14] fix: Fixed liveness periodseconds to 10 so that crashloopback off doe… by @knative-prow-robot in #15257
• [release-1.14] Drop the k8s service name from kubectl get revision output by @knative-prow-robot in #15262

Full Changelog: knative-v1.14.0...knative-v1.14.1

v1.13.2

Warning

For folks using the net-istio integration Knative Serving v1.13.x requires Istio v1.20.x. The net-istio release notes page highlights the version we use for testing.

If you are using an older version of Istio then Knative Services with GRPC traffic will stop working.

What's Changed

• [release-1.13] fix: Fixed liveness periodseconds to 10 so that crashloopback off doe… by @knative-prow-robot in #15258
• [release-1.13] Drop the k8s service name from kubectl get revision output by @knative-prow-robot in #15263
• [release-1.13] Add pod anti affinity rules to activator component by @knative-prow-robot in #15259

Full Changelog: knative-v1.13.1...knative-v1.13.2