From a8b343179f990ee87a21fa42843845a2e98fbf60 Mon Sep 17 00:00:00 2001 From: Knative Automation Date: Mon, 19 Aug 2024 11:05:45 +0000 Subject: [PATCH] Update eventing nightly bumping knative.dev/eventing 1123cfa...bf945f9: > bf945f9 Support authorization in Channel ingress (# 8162) > b57ac3a Fix: propagate EventPolicy filter to underlying Channels EventPolicy (# 8163) > 2b92299 Add filters to event policy (# 8122) > 90a88fc [main] Upgrade to latest dependencies (# 8159) Signed-off-by: Knative Automation --- .../eventing-latest/eventing-core.yaml | 223 ++++++++++-------- .../eventing-latest/eventing-crds.yaml | 63 ++++- 2 files changed, 180 insertions(+), 106 deletions(-) diff --git a/third_party/eventing-latest/eventing-core.yaml b/third_party/eventing-latest/eventing-core.yaml index 531747cf24..795164cdbc 100644 --- a/third_party/eventing-latest/eventing-core.yaml +++ b/third_party/eventing-latest/eventing-core.yaml @@ -16,7 +16,7 @@ kind: Namespace metadata: name: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing --- @@ -40,7 +40,7 @@ metadata: name: eventing-controller namespace: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing --- apiVersion: rbac.authorization.k8s.io/v1 @@ -48,7 +48,7 @@ kind: ClusterRoleBinding metadata: name: eventing-controller labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -64,7 +64,7 @@ kind: ClusterRoleBinding metadata: name: eventing-controller-resolver labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -80,7 +80,7 @@ kind: ClusterRoleBinding metadata: name: eventing-controller-source-observer labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -96,7 +96,7 @@ kind: ClusterRoleBinding metadata: name: eventing-controller-sources-controller labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -112,7 +112,7 @@ kind: ClusterRoleBinding metadata: name: eventing-controller-manipulator labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -128,7 +128,7 @@ kind: ClusterRoleBinding metadata: name: eventing-controller-crossnamespace-subscriber labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -160,7 +160,7 @@ metadata: name: job-sink namespace: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing --- apiVersion: rbac.authorization.k8s.io/v1 @@ -168,7 +168,7 @@ kind: ClusterRoleBinding metadata: name: knative-eventing-job-sink labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -200,7 +200,7 @@ metadata: name: pingsource-mt-adapter namespace: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing --- apiVersion: rbac.authorization.k8s.io/v1 @@ -208,7 +208,7 @@ kind: ClusterRoleBinding metadata: name: knative-eventing-pingsource-mt-adapter labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -240,7 +240,7 @@ metadata: name: eventing-webhook namespace: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing --- apiVersion: rbac.authorization.k8s.io/v1 @@ -248,7 +248,7 @@ kind: ClusterRoleBinding metadata: name: eventing-webhook labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -265,7 +265,7 @@ metadata: namespace: knative-eventing name: eventing-webhook labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -281,7 +281,7 @@ kind: ClusterRoleBinding metadata: name: eventing-webhook-resolver labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -297,7 +297,7 @@ kind: ClusterRoleBinding metadata: name: eventing-webhook-podspecable-binding labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing subjects: - kind: ServiceAccount @@ -329,7 +329,7 @@ metadata: name: config-br-default-channel namespace: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing data: channel-template-spec: | @@ -357,7 +357,7 @@ metadata: name: config-br-defaults namespace: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing data: # Configures the default for any Broker that does not specify a spec.config or Broker class. @@ -394,7 +394,7 @@ metadata: name: default-ch-webhook namespace: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing data: # Configuration for defaulting channels that do not specify CRD implementations. @@ -429,7 +429,7 @@ metadata: namespace: knative-eventing annotations: knative.dev/example-checksum: "9185c153" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing data: _example: | @@ -475,7 +475,7 @@ metadata: labels: knative.dev/config-propagation: original knative.dev/config-category: eventing - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing data: # ALPHA feature: The kreference-group allows you to use the Group field in KReferences. @@ -580,7 +580,7 @@ metadata: name: config-leader-election namespace: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing annotations: knative.dev/example-checksum: "f7948630" @@ -643,7 +643,7 @@ metadata: labels: knative.dev/config-propagation: original knative.dev/config-category: eventing - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing data: # Common configuration for all Knative codebase @@ -696,7 +696,7 @@ metadata: labels: knative.dev/config-propagation: original knative.dev/config-category: eventing - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing annotations: knative.dev/example-checksum: "f46cf09d" @@ -770,7 +770,7 @@ metadata: name: config-sugar namespace: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing annotations: knative.dev/example-checksum: "62dfac6f" @@ -829,7 +829,7 @@ metadata: labels: knative.dev/config-propagation: original knative.dev/config-category: eventing - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing annotations: knative.dev/example-checksum: "0492ceb0" @@ -886,7 +886,7 @@ metadata: labels: knative.dev/high-availability: "true" app.kubernetes.io/component: eventing-controller - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing bindings.knative.dev/exclude: "true" spec: @@ -898,7 +898,7 @@ spec: labels: app: eventing-controller app.kubernetes.io/component: eventing-controller - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: # To avoid node becoming SPOF, spread our replicas to different nodes. @@ -916,7 +916,7 @@ spec: containers: - name: eventing-controller terminationMessagePolicy: FallbackToLogsOnError - image: gcr.io/knative-nightly/knative.dev/eventing/cmd/controller@sha256:4be9a945620b31dd6ee452f3576291f8be52a1c9afc6a64e4ed0e14d9b29f1b7 + image: gcr.io/knative-nightly/knative.dev/eventing/cmd/controller@sha256:c84d3ac5f432417c249d3916e2fca248d421e1020f9040f9b165950df27a1b8c resources: requests: cpu: 100m @@ -934,7 +934,7 @@ spec: value: knative.dev/eventing # APIServerSource - name: APISERVER_RA_IMAGE - value: gcr.io/knative-nightly/knative.dev/eventing/cmd/apiserver_receive_adapter@sha256:695c0d386b6112425ae2304f89274e8c660b53732fd8b0421f0e00016da6ffcd + value: gcr.io/knative-nightly/knative.dev/eventing/cmd/apiserver_receive_adapter@sha256:d848d766be1d8c1f94dc1eed01c02e74293309b77003f6202136636cabdccee0 - name: POD_NAME valueFrom: fieldRef: @@ -1004,7 +1004,7 @@ metadata: namespace: knative-eventing labels: app.kubernetes.io/component: job-sink - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: replicas: 1 @@ -1016,7 +1016,7 @@ spec: labels: sinks.knative.dev/sink: job-sink app.kubernetes.io/component: job-sink - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: affinity: @@ -1032,7 +1032,7 @@ spec: containers: - name: job-sink terminationMessagePolicy: FallbackToLogsOnError - image: gcr.io/knative-nightly/knative.dev/eventing/cmd/jobsink@sha256:2238f29e84733aa62890ba115aea31eece8344e26d4fbac884be6b28236c3f38 + image: gcr.io/knative-nightly/knative.dev/eventing/cmd/jobsink@sha256:7e4e5ca83691ae173c589465dc695b90c9388e21f6f3cad38de2e199f2d7ece7 env: - name: SYSTEM_NAMESPACE valueFrom: @@ -1114,7 +1114,7 @@ metadata: labels: sinks.knative.dev/sink: job-sink app.kubernetes.io/component: job-sink - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing name: job-sink namespace: knative-eventing @@ -1157,7 +1157,7 @@ metadata: namespace: knative-eventing labels: app.kubernetes.io/component: pingsource-mt-adapter - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing bindings.knative.dev/exclude: "true" spec: @@ -1173,7 +1173,7 @@ spec: eventing.knative.dev/source: ping-source-controller sources.knative.dev/role: adapter app.kubernetes.io/component: pingsource-mt-adapter - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: affinity: @@ -1189,7 +1189,7 @@ spec: enableServiceLinks: false containers: - name: dispatcher - image: gcr.io/knative-nightly/knative.dev/eventing/cmd/mtping@sha256:994b762b2ab136b9b5a51fbe11ab52ba032e06859e03c2153e0999d7f1ef0445 + image: gcr.io/knative-nightly/knative.dev/eventing/cmd/mtping@sha256:1d49cc9f7e48d69c78dd91075628c0c3d20cef1147d4ea582df6dab72027f1f1 env: - name: SYSTEM_NAMESPACE value: '' @@ -1263,7 +1263,7 @@ metadata: namespace: knative-eventing labels: app.kubernetes.io/component: eventing-webhook - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: scaleTargetRef: @@ -1288,7 +1288,7 @@ metadata: namespace: knative-eventing labels: app.kubernetes.io/component: eventing-webhook - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: minAvailable: 80% @@ -1318,7 +1318,7 @@ metadata: namespace: knative-eventing labels: app.kubernetes.io/component: eventing-webhook - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing bindings.knative.dev/exclude: "true" spec: @@ -1332,7 +1332,7 @@ spec: app: eventing-webhook role: eventing-webhook app.kubernetes.io/component: eventing-webhook - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: # To avoid node becoming SPOF, spread our replicas to different nodes. @@ -1352,7 +1352,7 @@ spec: terminationMessagePolicy: FallbackToLogsOnError # This is the Go import path for the binary that is containerized # and substituted here. - image: gcr.io/knative-nightly/knative.dev/eventing/cmd/webhook@sha256:4766d6cdd9439c8044c3944a4f5dd05e8e39c728192bfcd669bbb671528d7695 + image: gcr.io/knative-nightly/knative.dev/eventing/cmd/webhook@sha256:5c88558c6b4e54687fb62af9bc69905ebd101375d29e0f02b18cb0b9608af166 resources: requests: # taken from serving. @@ -1431,7 +1431,7 @@ metadata: labels: role: eventing-webhook app.kubernetes.io/component: eventing-webhook - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing name: eventing-webhook namespace: knative-eventing @@ -1466,7 +1466,7 @@ metadata: eventing.knative.dev/source: "true" duck.knative.dev/source: "true" knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing annotations: # TODO add schemas @@ -1753,7 +1753,7 @@ metadata: labels: knative.dev/crd-install: "true" duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: eventing.knative.dev @@ -1968,7 +1968,7 @@ metadata: knative.dev/crd-install: "true" messaging.knative.dev/subscribable: "true" duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: messaging.knative.dev @@ -2326,7 +2326,7 @@ metadata: eventing.knative.dev/source: "true" duck.knative.dev/source: "true" knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing name: containersources.sources.knative.dev spec: @@ -2501,7 +2501,7 @@ metadata: name: eventpolicies.eventing.knative.dev labels: knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: eventing.knative.dev @@ -2594,6 +2594,43 @@ spec: description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. type: object x-kubernetes-preserve-unknown-fields: true + filters: + description: 'Filters is an array of SubscriptionsAPIFilters that evaluate to true or false. If any filter expression in the array evaluates to false, the event will not continue pass the ingress of the target resources of the policy' + type: array + items: + type: object + properties: + all: + description: 'All evaluates to true if all the nested expressions evaluate to true. It must contain at least one filter expression' + type: array + items: + type: object + x-kubernetes-preserve-unknown-fields: true + any: + description: 'Any evaluates to true if any of the nested expressions evaluate to true. It must contain at least one filter expression' + type: array + items: + type: object + x-kubernetes-preserve-unknown-fields: true + cesql: + description: 'CESQL is a CloudEvents SQL v1 expression that will evaluate to true or false for each CloudEvent.' + type: string + exact: + description: 'Exact evaluates to true if the values of the matching CloudEvents attributes all exactly match with the associated value string specified (case sensitive)' + type: object + x-kubernetes-preserve-unknown-fields: true + not: + description: 'Not evaluates to true if the nested expression evaluates to false.' + type: object + x-kubernetes-preserve-unknown-fields: true + prefix: + description: 'Prefix evaluates to true if the values of the matching CloudEvents attributes all start with the associated value string specified (case sensitive)' + type: object + x-kubernetes-preserve-unknown-fields: true + suffix: + description: 'Exact evaluates to true if the values of the matching CloudEvents attributes all end with the associated value string specified (case sensitive)' + type: object + x-kubernetes-preserve-unknown-fields: true status: description: Status represents the current state of the EventPolicy. This data may be out of date. type: object @@ -2683,7 +2720,7 @@ metadata: name: eventtypes.eventing.knative.dev labels: knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: eventing.knative.dev @@ -3076,7 +3113,7 @@ metadata: labels: knative.dev/crd-install: "true" duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: sinks.knative.dev @@ -3223,7 +3260,7 @@ metadata: labels: knative.dev/crd-install: "true" duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: flows.knative.dev @@ -3751,7 +3788,7 @@ metadata: eventing.knative.dev/source: "true" duck.knative.dev/source: "true" knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing annotations: # TODO add schema @@ -4123,7 +4160,7 @@ metadata: labels: knative.dev/crd-install: "true" duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: flows.knative.dev @@ -4507,7 +4544,7 @@ metadata: duck.knative.dev/source: "true" duck.knative.dev/binding: "true" knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing name: sinkbindings.sources.knative.dev spec: @@ -4722,7 +4759,7 @@ metadata: name: subscriptions.messaging.knative.dev labels: knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: messaging.knative.dev @@ -4984,7 +5021,7 @@ metadata: name: triggers.eventing.knative.dev labels: knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: eventing.knative.dev @@ -5257,7 +5294,7 @@ kind: ClusterRole metadata: name: addressable-resolver labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing aggregationRule: clusterRoleSelectors: @@ -5271,7 +5308,7 @@ metadata: name: service-addressable-resolver labels: duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing # Do not use this role directly. These rules will be added to the "addressable-resolver" role. rules: @@ -5290,7 +5327,7 @@ metadata: name: serving-addressable-resolver labels: duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing # Do not use this role directly. These rules will be added to the "addressable-resolver" role. rules: @@ -5312,7 +5349,7 @@ metadata: name: channel-addressable-resolver labels: duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing # Do not use this role directly. These rules will be added to the "addressable-resolver" role. rules: @@ -5338,7 +5375,7 @@ metadata: name: broker-addressable-resolver labels: duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing # Do not use this role directly. These rules will be added to the "addressable-resolver" role. rules: @@ -5358,7 +5395,7 @@ metadata: name: flows-addressable-resolver labels: duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing # Do not use this role directly. These rules will be added to the "addressable-resolver" role. rules: @@ -5394,7 +5431,7 @@ kind: ClusterRole metadata: name: eventing-broker-filter labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: @@ -5420,7 +5457,7 @@ kind: ClusterRole metadata: name: eventing-broker-ingress labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: @@ -5437,7 +5474,7 @@ kind: ClusterRole metadata: name: eventing-config-reader labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: @@ -5470,7 +5507,7 @@ kind: ClusterRole metadata: name: channelable-manipulator labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing aggregationRule: clusterRoleSelectors: @@ -5484,7 +5521,7 @@ metadata: name: meta-channelable-manipulator labels: duck.knative.dev/channelable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing # Do not use this role directly. These rules will be added to the "channelable-manipulator" role. rules: @@ -5523,7 +5560,7 @@ metadata: name: knative-eventing-namespaced-admin labels: rbac.authorization.k8s.io/aggregate-to-admin: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: ["eventing.knative.dev"] @@ -5536,7 +5573,7 @@ metadata: name: knative-messaging-namespaced-admin labels: rbac.authorization.k8s.io/aggregate-to-admin: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: ["messaging.knative.dev"] @@ -5549,7 +5586,7 @@ metadata: name: knative-flows-namespaced-admin labels: rbac.authorization.k8s.io/aggregate-to-admin: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: ["flows.knative.dev"] @@ -5562,7 +5599,7 @@ metadata: name: knative-sources-namespaced-admin labels: rbac.authorization.k8s.io/aggregate-to-admin: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: ["sources.knative.dev"] @@ -5575,7 +5612,7 @@ metadata: name: knative-bindings-namespaced-admin labels: rbac.authorization.k8s.io/aggregate-to-admin: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: ["bindings.knative.dev"] @@ -5588,7 +5625,7 @@ metadata: name: knative-eventing-namespaced-edit labels: rbac.authorization.k8s.io/aggregate-to-edit: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: ["eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev"] @@ -5601,7 +5638,7 @@ metadata: name: knative-eventing-namespaced-view labels: rbac.authorization.k8s.io/aggregate-to-view: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: ["eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev"] @@ -5628,7 +5665,7 @@ kind: ClusterRole metadata: name: knative-eventing-controller labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: @@ -5837,7 +5874,7 @@ kind: ClusterRole metadata: name: crossnamespace-subscriber labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing aggregationRule: clusterRoleSelectors: @@ -5851,7 +5888,7 @@ metadata: name: channel-subscriber labels: duck.knative.dev/crossnamespace-subscribable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: @@ -5867,7 +5904,7 @@ metadata: name: broker-subscriber labels: duck.knative.dev/crossnamespace-subscribable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: @@ -5897,7 +5934,7 @@ kind: ClusterRole metadata: name: knative-eventing-job-sink labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: @@ -5991,7 +6028,7 @@ kind: ClusterRole metadata: name: knative-eventing-pingsource-mt-adapter labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: @@ -6064,7 +6101,7 @@ kind: ClusterRole metadata: name: podspecable-binding labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing aggregationRule: clusterRoleSelectors: @@ -6078,7 +6115,7 @@ metadata: name: builtin-podspecable-binding labels: duck.knative.dev/podspecable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing # Do not use this role directly. These rules will be added to the "podspecable-binding role. rules: @@ -6124,7 +6161,7 @@ kind: ClusterRole metadata: name: source-observer labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing aggregationRule: clusterRoleSelectors: @@ -6138,7 +6175,7 @@ metadata: name: eventing-sources-source-observer labels: duck.knative.dev/source: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing # Do not use this role directly. These rules will be added to the "source-observer" role. rules: @@ -6174,7 +6211,7 @@ kind: ClusterRole metadata: name: knative-eventing-sources-controller labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: - apiGroups: @@ -6295,7 +6332,7 @@ kind: ClusterRole metadata: name: knative-eventing-webhook labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: # For watching logging configuration and getting certs. @@ -6472,7 +6509,7 @@ metadata: namespace: knative-eventing name: knative-eventing-webhook labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing rules: # For manipulating certs into secrets. @@ -6508,7 +6545,7 @@ kind: ValidatingWebhookConfiguration metadata: name: config.webhook.eventing.knative.dev labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing webhooks: - admissionReviewVersions: ["v1", "v1beta1"] @@ -6546,7 +6583,7 @@ kind: MutatingWebhookConfiguration metadata: name: webhook.eventing.knative.dev labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing webhooks: - admissionReviewVersions: ["v1", "v1beta1"] @@ -6579,7 +6616,7 @@ kind: ValidatingWebhookConfiguration metadata: name: validation.webhook.eventing.knative.dev labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing webhooks: - admissionReviewVersions: ["v1", "v1beta1"] @@ -6613,7 +6650,7 @@ metadata: name: eventing-webhook-certs namespace: knative-eventing labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing # The data is populated at install time. @@ -6637,7 +6674,7 @@ kind: MutatingWebhookConfiguration metadata: name: sinkbindings.webhook.sources.knative.dev labels: - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing webhooks: - admissionReviewVersions: ["v1", "v1beta1"] diff --git a/third_party/eventing-latest/eventing-crds.yaml b/third_party/eventing-latest/eventing-crds.yaml index 28d9fd4f71..786fc4408c 100644 --- a/third_party/eventing-latest/eventing-crds.yaml +++ b/third_party/eventing-latest/eventing-crds.yaml @@ -20,7 +20,7 @@ metadata: eventing.knative.dev/source: "true" duck.knative.dev/source: "true" knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing annotations: # TODO add schemas @@ -307,7 +307,7 @@ metadata: labels: knative.dev/crd-install: "true" duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: eventing.knative.dev @@ -522,7 +522,7 @@ metadata: knative.dev/crd-install: "true" messaging.knative.dev/subscribable: "true" duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: messaging.knative.dev @@ -880,7 +880,7 @@ metadata: eventing.knative.dev/source: "true" duck.knative.dev/source: "true" knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing name: containersources.sources.knative.dev spec: @@ -1055,7 +1055,7 @@ metadata: name: eventpolicies.eventing.knative.dev labels: knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: eventing.knative.dev @@ -1148,6 +1148,43 @@ spec: description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. type: object x-kubernetes-preserve-unknown-fields: true + filters: + description: 'Filters is an array of SubscriptionsAPIFilters that evaluate to true or false. If any filter expression in the array evaluates to false, the event will not continue pass the ingress of the target resources of the policy' + type: array + items: + type: object + properties: + all: + description: 'All evaluates to true if all the nested expressions evaluate to true. It must contain at least one filter expression' + type: array + items: + type: object + x-kubernetes-preserve-unknown-fields: true + any: + description: 'Any evaluates to true if any of the nested expressions evaluate to true. It must contain at least one filter expression' + type: array + items: + type: object + x-kubernetes-preserve-unknown-fields: true + cesql: + description: 'CESQL is a CloudEvents SQL v1 expression that will evaluate to true or false for each CloudEvent.' + type: string + exact: + description: 'Exact evaluates to true if the values of the matching CloudEvents attributes all exactly match with the associated value string specified (case sensitive)' + type: object + x-kubernetes-preserve-unknown-fields: true + not: + description: 'Not evaluates to true if the nested expression evaluates to false.' + type: object + x-kubernetes-preserve-unknown-fields: true + prefix: + description: 'Prefix evaluates to true if the values of the matching CloudEvents attributes all start with the associated value string specified (case sensitive)' + type: object + x-kubernetes-preserve-unknown-fields: true + suffix: + description: 'Exact evaluates to true if the values of the matching CloudEvents attributes all end with the associated value string specified (case sensitive)' + type: object + x-kubernetes-preserve-unknown-fields: true status: description: Status represents the current state of the EventPolicy. This data may be out of date. type: object @@ -1237,7 +1274,7 @@ metadata: name: eventtypes.eventing.knative.dev labels: knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: eventing.knative.dev @@ -1630,7 +1667,7 @@ metadata: labels: knative.dev/crd-install: "true" duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: sinks.knative.dev @@ -1777,7 +1814,7 @@ metadata: labels: knative.dev/crd-install: "true" duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: flows.knative.dev @@ -2305,7 +2342,7 @@ metadata: eventing.knative.dev/source: "true" duck.knative.dev/source: "true" knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing annotations: # TODO add schema @@ -2677,7 +2714,7 @@ metadata: labels: knative.dev/crd-install: "true" duck.knative.dev/addressable: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: flows.knative.dev @@ -3061,7 +3098,7 @@ metadata: duck.knative.dev/source: "true" duck.knative.dev/binding: "true" knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing name: sinkbindings.sources.knative.dev spec: @@ -3276,7 +3313,7 @@ metadata: name: subscriptions.messaging.knative.dev labels: knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: messaging.knative.dev @@ -3538,7 +3575,7 @@ metadata: name: triggers.eventing.knative.dev labels: knative.dev/crd-install: "true" - app.kubernetes.io/version: "20240815-1123cfa0a" + app.kubernetes.io/version: "20240818-bf945f909" app.kubernetes.io/name: knative-eventing spec: group: eventing.knative.dev