Bump Serving manifests to 1.16 (#3366)

* Bump Serving to 1.16

* rebase

* make generated-files

Author: skonto

olm-catalog/serverless-operator/manifests/serverless-operator.clusterserviceversion.yaml

@@ -34,14 +34,14 @@ requirements:
         # OCP stream for kube-rbac-proxy image.
         kube-rbac-proxy: "4.17"
 dependencies:
-    serving: knative-v1.15
+    serving: knative-v1.16
     # serving midstream branch name
-    serving_artifacts_branch: release-v1.15
+    serving_artifacts_branch: release-v1.16
     # versions for networking components
-    kourier: knative-v1.15
-    net_kourier_artifacts_branch: release-v1.15
-    net_istio: knative-v1.15
-    net_istio_artifacts_branch: release-v1.15
+    kourier: knative-v1.16
+    net_kourier_artifacts_branch: release-v1.16
+    net_istio: knative-v1.16
+    net_istio_artifacts_branch: release-v1.16
     redhat-knative-istio-authz-chart: 1.36.0
     service_mesh_proxy: registry.redhat.io/openshift-service-mesh/proxyv2-rhel8@sha256:61a705509328e56d50a1eb9a7f5eb90512f69cc1040ef34c0adb86dd6b05429f
     eventing: knative-v1.16

olm-catalog/serverless-operator/project.yaml

@@ -21,7 +21,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     serving.knative.dev/controller: "true"
     networking.knative.dev/ingress-provider: istio
 rules:
@@ -51,7 +51,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     networking.knative.dev/ingress-provider: istio
 data:
   # TODO(nghia): Extract the .svc.cluster.local suffix into its own config.
@@ -173,7 +173,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -189,7 +189,7 @@ spec:
         app: net-istio-controller
         app.kubernetes.io/component: net-istio
         app.kubernetes.io/name: knative-serving
-        app.kubernetes.io/version: "release-v1.15"
+        app.kubernetes.io/version: "release-v1.16"
     spec:
       serviceAccountName: controller
       containers:
@@ -280,7 +280,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -294,7 +294,7 @@ spec:
         role: net-istio-webhook
         app.kubernetes.io/component: net-istio
         app.kubernetes.io/name: knative-serving
-        app.kubernetes.io/version: "release-v1.15"
+        app.kubernetes.io/version: "release-v1.16"
     spec:
       serviceAccountName: controller
       containers:
@@ -384,7 +384,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     networking.knative.dev/ingress-provider: istio
 ---
 # Copyright 2020 The Knative Authors
@@ -410,7 +410,7 @@ metadata:
     role: net-istio-webhook
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     networking.knative.dev/ingress-provider: istio
 spec:
   ports:
@@ -448,7 +448,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     networking.knative.dev/ingress-provider: istio
 webhooks:
 - admissionReviewVersions:
@@ -486,7 +486,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     networking.knative.dev/ingress-provider: istio
 webhooks:
 - admissionReviewVersions:

openshift-knative-operator/cmd/openshift-knative-operator/kodata/ingress/latest/istio/1-net-istio-core.yaml

@@ -21,7 +21,7 @@ metadata:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/name: knative-serving
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
 ---
 # Copyright 2020 The Knative Authors
 #
@@ -45,7 +45,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 data:
   envoy-bootstrap.yaml: |
@@ -173,7 +173,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 data:
   _example: |
@@ -225,6 +225,10 @@ data:
     # right side of the x-forwarded-for HTTP header to trust.
     trusted-hops-count: "0"
 
+    # Configures the connection manager to use the real remote address
+    # of the client connection when determining internal versus external origin and manipulating various headers.
+    use-remote-address: "false"
+
     # Specifies the cipher suites for TLS external listener.
     # Use ',' separated values like "ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-CHACHA20-POLY1305"
     # The default uses the default cipher suites of the envoy version.
@@ -252,7 +256,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -262,7 +266,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 rules:
   - apiGroups: [""]
@@ -291,7 +295,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -324,7 +328,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 spec:
   strategy:
@@ -414,7 +418,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 spec:
   ports:
@@ -452,7 +456,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 spec:
   strategy:
@@ -569,7 +573,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 spec:
   ports:
@@ -593,7 +597,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 spec:
   ports:
@@ -617,7 +621,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 spec:
   minReplicas: 1
@@ -643,7 +647,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
     app.kubernetes.io/name: knative-serving
 spec:
   minAvailable: 1
@@ -662,7 +666,7 @@ metadata:
     app.kubernetes.io/name: knative-serving
     app.kubernetes.io/component: net-kourier
     networking.knative.dev/ingress-provider: kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
   name: routing-serving-certs
   namespace: knative-serving
 spec:
@@ -694,7 +698,7 @@ metadata:
     app.kubernetes.io/name: knative-serving
     app.kubernetes.io/component: net-kourier
     networking.knative.dev/ingress-provider: kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
 data:
   _example: ""
 ---
@@ -721,7 +725,7 @@ metadata:
     app.kubernetes.io/name: knative-serving
     app.kubernetes.io/component: net-kourier
     networking.knative.dev/ingress-provider: kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
 data:
   _example: ""
 ---
@@ -748,6 +752,6 @@ metadata:
     app.kubernetes.io/name: knative-serving
     app.kubernetes.io/component: net-kourier
     networking.knative.dev/ingress-provider: kourier
-    app.kubernetes.io/version: "release-v1.15"
+    app.kubernetes.io/version: "release-v1.16"
 data:
   _example: ""

openshift-knative-operator/cmd/openshift-knative-operator/kodata/ingress/latest/kourier/1-net-kourier.yaml

@@ -402,14 +402,27 @@ rules:
 ---
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: knative-sinks-namespaced-admin
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
+    app.kubernetes.io/version: v1.16
+    app.kubernetes.io/name: knative-eventing
+rules:
+  - apiGroups: ["sinks.knative.dev"]
+    resources: ["*"]
+    verbs: ["*"]
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: knative-eventing-namespaced-edit
   labels:
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
     app.kubernetes.io/version: v1.16
     app.kubernetes.io/name: knative-eventing
 rules:
-  - apiGroups: ["eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev"]
+  - apiGroups: ["eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev"]
     resources: ["*"]
     verbs: ["create", "update", "patch", "delete"]
 ---
@@ -422,7 +435,7 @@ metadata:
     app.kubernetes.io/version: v1.16
     app.kubernetes.io/name: knative-eventing
 rules:
-  - apiGroups: ["eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev"]
+  - apiGroups: ["eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev"]
     resources: ["*"]
     verbs: ["get", "list", "watch"]
 ---