knative/serving knative-v1.20.0

v1.20.0

on GitHub

🚨 Breaking or Notable Changes

Metrics and Tracing

In v1.19 we've dropped support for OpenCensus (which has been deprecated for a while) in favour of OpenTelemetry. This is a breaking change and details are documented here in the design document. and the website (https://knative.dev/docs/serving/observability/metrics/collecting-metrics/)

Secure Pod Defaults (#16042, @nader-ziada)

We've introduce secure-pod-defaults in an earlier release but this release includes a new setting AllowRootBounded that offers a better security posture for your workloads but balances the compatibility with images that require/expect you to run as root.

For v1.20 release the secure-pod-defaults default will remain disabled but in a future release (most likely v1.21) we will switch this default to AllowRootBounded.

If you're unsure whether your workloads will support this new setting you should explicitly set this option to disabled prior to upgrading to v1.21.

For more information see the documentation and reach out if you foresee issues in your testing.

💫 New Features & Changes

• Create a new value for secure-pod-defaults: AllowRootBounded
  • when AllowRootBounded, defaults SeccompProfile and Capabilities if nil
  • when enabled sets RunAsNonRoot to true if not already specified (#16042, @nader-ziada)
• Made it possible to configure the httputil.ReverseProxy or add http.Handlers to queue-proxy in out-of-tree builds. (#16097, @mbaynton)
• Podspec-dryrun feature flag has been removed. Dry run validation will now occur when a user opts into it using kubectl apply --dry-run=server (#16008, @Alexander-Kita)
• Add distinct logging for timeout types by @thiagomedina in #16109
• drop unnecessary 'kn.activator.proxy' metric/span attribute by @dprotaso in #16045
• bump Istio to v1.27 and Contour to v1.33 by @dprotaso in #16099
• Keep queue-proxy admin server on HTTP for PreStop hooks by @Fedosin in #16163

🐞Bug Fixes

• Fix min-scale transition by @dprotaso in #16094
• Add initialize conditions to MakePA to avoid potential race conditions by @nader-ziada in #16037
• For orphaned certificates if we have an issue listing just log the error by @dprotaso in #16096
• Fix queue proxy user metrics port by @dprotaso in #16018
• drop unused metrics domain env var by @dprotaso in #16019
• fix otelhttp setup in activator by @dprotaso in #16044
• Drop probe tracing in queue-proxy by @dprotaso in #16048
• Adjust queue proxy metric attributes by @dprotaso in #16049
• Serving Metric Tweaks by @dprotaso in #16062
• Fix: PodAutoscaler not reconciled due to missing class annotation by @nader-ziada in #16141

New Contributors

• @Alexander-Kita made their first contribution in #16008
• @mbaynton made their first contribution in #16097
• @thiagomedina made their first contribution in #16109
• @ali-a-a made their first contribution in #16201

Dependencies

Full Changelog: knative-v1.19.0...knative-v1.20.0