Fix ci (#5629)

* Revert "Improve security-related config in more yaml files (#5612)" This reverts commit 699a33b. * Revert "Improve security-related config in yaml files (#5611)" This reverts commit ea859aa.
knative · Aug 9, 2021 · 0c41e6d · 0c41e6d
1 parent e340077
commit 0c41e6d
Show file tree

Hide file tree

Showing 10 changed files with 0 additions and 87 deletions.
diff --git a/config/brokers/mt-channel-broker/deployments/broker-filter.yaml b/config/brokers/mt-channel-broker/deployments/broker-filter.yaml
@@ -84,19 +84,8 @@ spec:
             value: knative.dev/internal/eventing
           - name: FILTER_PORT
             value: "8080"
-
-        resources:
-          requests:
-            cpu: 100m
-            memory: 100Mi
-          limits:
-            cpu: 1000m
-            memory: 1000Mi
-
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
-          readOnlyRootFilesystem: true
 
 ---
 

diff --git a/config/brokers/mt-channel-broker/deployments/broker-ingress.yaml b/config/brokers/mt-channel-broker/deployments/broker-ingress.yaml
@@ -84,19 +84,8 @@ spec:
             value: knative.dev/internal/eventing
           - name: INGRESS_PORT
             value: "8080"
-
-        resources:
-          requests:
-            cpu: 100m
-            memory: 100Mi
-          limits:
-            cpu: 1000m
-            memory: 1000Mi
-
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
-          readOnlyRootFilesystem: true
 
 ---
 

diff --git a/config/brokers/mt-channel-broker/deployments/controller.yaml b/config/brokers/mt-channel-broker/deployments/controller.yaml
@@ -77,18 +77,8 @@ spec:
               fieldRef:
                 fieldPath: metadata.name
 
-        resources:
-          requests:
-            cpu: 100m
-            memory: 100Mi
-          limits:
-            cpu: 1000m
-            memory: 1000Mi
-
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
-          readOnlyRootFilesystem: true
 
         ports:
         - name: metrics

diff --git a/config/channels/in-memory-channel/deployments/controller.yaml b/config/channels/in-memory-channel/deployments/controller.yaml
@@ -64,18 +64,8 @@ spec:
               fieldRef:
                 fieldPath: metadata.name
 
-        resources:
-          requests:
-            cpu: 100m
-            memory: 100Mi
-          limits:
-            cpu: 1000m
-            memory: 1000Mi
-
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
-          readOnlyRootFilesystem: true
 
         ports:
         - name: metrics

diff --git a/config/channels/in-memory-channel/deployments/dispatcher.yaml b/config/channels/in-memory-channel/deployments/dispatcher.yaml
@@ -54,17 +54,6 @@ spec:
         livenessProbe:
           <<: *probe
           initialDelaySeconds: 5
-        resources:
-          requests:
-            cpu: 100m
-            memory: 100Mi
-          limits:
-            cpu: 1000m
-            memory: 1000Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          runAsNonRoot: true
-          readOnlyRootFilesystem: true
         env:
           - name: CONFIG_LOGGING_NAME
             value: config-logging

diff --git a/config/core/deployments/controller.yaml b/config/core/deployments/controller.yaml
@@ -52,9 +52,6 @@ spec:
           requests:
             cpu: 100m
             memory: 100Mi
-          limits:
-            cpu: 1000m
-            memory: 1000Mi
 
         env:
           - name: SYSTEM_NAMESPACE
@@ -89,8 +86,6 @@ spec:
 
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
-          readOnlyRootFilesystem: true
 
         ports:
         - name: metrics

diff --git a/config/core/deployments/pingsource-mt-adapter.yaml b/config/core/deployments/pingsource-mt-adapter.yaml
@@ -73,10 +73,6 @@ spec:
             - containerPort: 9090
               name: metrics
               protocol: TCP
-          securityContext:
-            allowPrivilegeEscalation: false
-            runAsNonRoot: true
-            readOnlyRootFilesystem: true
           resources:
             requests:
               cpu: 125m

diff --git a/config/core/deployments/webhook.yaml b/config/core/deployments/webhook.yaml
@@ -88,8 +88,6 @@ spec:
 
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
-          readOnlyRootFilesystem: true
 
         ports:
         - name: https-webhook

diff --git a/config/post-install/storage-version-migrator.yaml b/config/post-install/storage-version-migrator.yaml
@@ -43,16 +43,3 @@ spec:
           image: ko://knative.dev/eventing/vendor/knative.dev/pkg/apiextensions/storageversion/cmd/migrate
           args:
             - "pingsources.sources.knative.dev"
-
-          resources:
-            requests:
-              cpu: 100m
-              memory: 100Mi
-            limits:
-              cpu: 1000m
-              memory: 1000Mi
-
-          securityContext:
-            allowPrivilegeEscalation: false
-            runAsNonRoot: true
-            readOnlyRootFilesystem: true
diff --git a/config/sugar/500-controller.yaml b/config/sugar/500-controller.yaml
@@ -56,18 +56,8 @@ spec:
               fieldRef:
                 fieldPath: metadata.name
 
-        resources:
-          requests:
-            cpu: 100m
-            memory: 100Mi
-          limits:
-            cpu: 1000m
-            memory: 1000Mi
-
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
-          readOnlyRootFilesystem: true
 
         ports:
         - name: metrics