Add openshift specific files.

.github/workflows/multiarch-build.yaml

@@ -0,0 +1,10 @@
+name: Multiarch builds
+
+on:
+  push:
+    branches: [ 'release-v*' ]
+
+jobs:
+  multiarch-build:
+    uses: openshift-knative/hack/.github/workflows/multiarch-build.yaml@main
+    secrets: inherit

.ko.yaml

@@ -1,2 +1,2 @@
 # Use :nonroot base image for all containers
-defaultBaseImage: gcr.io/distroless/static:nonroot
+defaultBaseImage: registry.access.redhat.com/ubi8/ubi-minimal:latest

Makefile

@@ -0,0 +1,83 @@
+#This makefile is used by ci-operator
+
+CGO_ENABLED=0
+GOOS=linux
+CORE_IMAGES=$(shell find ./cmd -name main.go ! -path "./cmd/broker/*" ! -path "./cmd/mtbroker/*" | sed 's|/main.go||') ./vendor/knative.dev/pkg/apiextensions/storageversion/cmd/migrate ./vendor/knative.dev/pkg/leaderelection/chaosduck
+TEST_IMAGES=$(shell find ./test/test_images -mindepth 1 -maxdepth 1 -type d) ./vendor/knative.dev/reconciler-test/cmd/eventshub ./cmd/heartbeats
+BRANCH=
+TEST=
+IMAGE=
+TEST_IMAGE_TAG ?= latest
+
+# Guess location of openshift/release repo. NOTE: override this if it is not correct.
+OPENSHIFT=${CURDIR}/../../github.com/openshift/release
+
+install:
+	for img in $(CORE_IMAGES); do \
+		go install $$img ; \
+	done
+	go build -o $(GOPATH)/bin/mtbroker_ingress ./cmd/broker/ingress/
+	go build -o $(GOPATH)/bin/mtbroker_filter ./cmd/broker/filter/
+	go build -o $(GOPATH)/bin/storage_version_migration ./vendor/knative.dev/pkg/apiextensions/storageversion/cmd/migrate
+.PHONY: install
+
+test-install:
+	for img in $(TEST_IMAGES); do \
+		go install $$img ; \
+	done
+.PHONY: test-install
+
+test-e2e:
+	sh openshift/e2e-tests.sh
+.PHONY: test-e2e
+
+test-conformance:
+	sh openshift/e2e-conformance-tests.sh
+.PHONY: test-conformance
+
+test-reconciler:
+	sh openshift/e2e-rekt-tests.sh
+.PHONY: test-reconciler
+
+test-experimental:
+	sh openshift/e2e-experimental-tests.sh
+.PHONY: test-experimental
+
+test-encryption-auth-e2e:
+	sh openshift/e2e-encryption-auth-tests.sh
+.PHONY: test-encryption-auth-e2e
+
+# Target used by github actions.
+test-images:
+	for img in $(TEST_IMAGES); do \
+		KO_DOCKER_REPO=$(DOCKER_REPO_OVERRIDE) ko build --tags=$(TEST_IMAGE_TAG) $(KO_FLAGS) -B $$img || \
+		KO_DOCKER_REPO=$(DOCKER_REPO_OVERRIDE) ko resolve --tags=$(TEST_IMAGE_TAG) $(KO_FLAGS) -RBf $$img || exit $?; \
+	done
+.PHONY: test-images
+
+test-image-single:
+	KO_DOCKER_REPO=$(DOCKER_REPO_OVERRIDE) ko build --tags=$(TEST_IMAGE_TAG) $(KO_FLAGS) -B test/test_images/$(IMAGE) || \
+	KO_DOCKER_REPO=$(DOCKER_REPO_OVERRIDE) ko resolve --tags=$(TEST_IMAGE_TAG) $(KO_FLAGS) -RBf test/test_images/$(IMAGE)
+.PHONY: test-image-single
+
+# Run make DOCKER_REPO_OVERRIDE=<your_repo> test-e2e-local if test images are available
+# in the given repository. Make sure you first build and push them there by running `make test-images`.
+# Run make BRANCH=<ci_promotion_name> test-e2e-local if test images from the latest CI
+# build for this branch should be used. Example: `make BRANCH=knative-v0.14.2 test-e2e-local`.
+# If neither DOCKER_REPO_OVERRIDE nor BRANCH are defined the tests will use test images
+# from the last nightly build.
+# If TEST is defined then only the single test will be run.
+test-e2e-local:
+	./openshift/e2e-tests-local.sh $(TEST)
+.PHONY: test-e2e-local
+
+# Generate an aggregated knative release yaml file, as well as a CI file with replaced image references
+generate-release:
+	./openshift/release/generate-release.sh
+.PHONY: generate-release
+
+# Update CI configuration in the $(OPENSHIFT) directory.
+# NOTE: Makes changes outside this repository.
+update-ci:
+	sh ./openshift/ci-operator/update-ci.sh $(OPENSHIFT) $(CORE_IMAGES)
+.PHONY: update-ci

OWNERS

@@ -1,13 +1,8 @@
-# Approvers in this repo should also be added to the eventing-contrib
-# approvers list.
+# The OWNERS file is used by prow to automatically merge approved PRs.
+
 approvers:
-- technical-oversight-committee
-- eventing-writers
-- knative-release-leads
+- eventing-approvers
 
-# Reviewers are suggested from the reviewers list first, then the approvers
-# list. To add reviewers while spreading the load among existing approvers,
-# copy the approvers to the reviewers list too.
 reviewers:
-- eventing-writers
 - eventing-reviewers
+

OWNERS_ALIASES

@@ -1,159 +1,17 @@
-# This file is auto-generated from peribolos.
-# Do not modify this file, instead modify peribolos/knative.yaml
-
 aliases:
-  client-reviewers:
-  - itsmurugappan
-  client-wg-leads:
-  - dsimansk
-  - rhuss
-  client-writers:
-  - dsimansk
-  - maximilien
-  - rhuss
-  - vyasgun
-  docs-reviewers:
-  - nainaz
-  - pmbanugo
-  - retocode
-  - skonto
-  - snneji
-  docs-writers:
-  - csantanapr
-  - retocode
-  - skonto
-  eventing-reviewers:
-  - Leo6Leo
-  - aslom
-  - cali0707
-  - creydr
-  eventing-wg-leads:
-  - pierDipi
-  eventing-writers:
-  - aliok
-  - cali0707
-  - creydr
-  - lionelvillard
-  - matzew
-  - odacremolbap
-  - pierDipi
-  func-reviewers:
-  - jrangelramos
-  - nainaz
-  func-writers:
-  - gauron99
-  - jrangelramos
-  - lance
-  - lkingland
-  - matejvasek
-  - matzew
-  - salaboy
-  functions-wg-leads:
-  - lkingland
-  - salaboy
-  knative-admin:
-  - Cali0707
-  - Leo6Leo
-  - ReToCode
+  eventing-approvers:
+  - alanfx
   - aliok
-  - cardil
-  - creydr
-  - davidhadas
-  - dprotaso
-  - dsimansk
-  - evankanderson
-  - izabelacg
-  - knative-automation
-  - knative-prow-releaser-robot
-  - knative-prow-robot
-  - knative-prow-updater-robot
-  - knative-test-reporter-robot
-  - krsna-m
-  - nainaz
-  - pierDipi
-  - psschwei
-  - salaboy
-  - skonto
-  - upodroid
-  knative-release-leads:
-  - Cali0707
-  - Leo6Leo
-  - ReToCode
   - creydr
-  - dsimansk
-  - izabelacg
-  - pierDipi
-  - skonto
-  knative-robots:
-  - knative-automation
-  - knative-prow-releaser-robot
-  - knative-prow-robot
-  - knative-prow-updater-robot
-  - knative-test-reporter-robot
-  operations-reviewers:
-  - aliok
-  - houshengbo
+  - jcrossley3
+  - lberk
   - matzew
-  - maximilien
-  operations-wg-leads:
-  - houshengbo
-  operations-writers:
-  - aliok
-  - houshengbo
-  - matzew
-  - maximilien
-  productivity-leads:
-  - cardil
-  - upodroid
-  productivity-reviewers:
-  - evankanderson
   - mgencur
-  productivity-wg-leads:
-  - cardil
-  - upodroid
-  productivity-writers:
-  - cardil
-  - krsna-m
-  - upodroid
-  security-wg-leads:
-  - davidhadas
-  - evankanderson
-  security-writers:
-  - davidhadas
-  - evankanderson
-  serving-approvers:
-  - skonto
-  serving-reviewers:
-  - izabelacg
-  - retocode
+  - pierdipi
   - skonto
-  serving-triage:
-  - izabelacg
-  - retocode
-  - skonto
-  serving-wg-leads:
-  - dprotaso
-  serving-writers:
-  - dprotaso
-  - skonto
-  steering-committee:
+  eventing-reviewers:
   - aliok
-  - evankanderson
-  - nainaz
-  - salaboy
-  technical-oversight-committee:
-  - davidhadas
-  - dprotaso
-  - dsimansk
-  - krsna-m
-  - psschwei
-  ux-wg-leads:
-  - cali0707
-  - leo6leo
-  - mmejia02
-  - zainabhusain227
-  ux-writers:
-  - cali0707
-  - leo6leo
-  - mmejia02
-  - zainabhusain227
+  - creydr
+  - lberk
+  - matzew
+  - pierdipi

config/brokers/mt-channel-broker/deployments/broker-filter.yaml

@@ -107,8 +107,6 @@ spec:
           capabilities:
             drop:
             - ALL
-          seccompProfile:
-            type: RuntimeDefault
 
 ---
 

config/brokers/mt-channel-broker/deployments/broker-ingress.yaml

@@ -107,8 +107,6 @@ spec:
           capabilities:
             drop:
             - ALL
-          seccompProfile:
-            type: RuntimeDefault
 
 ---
 

config/brokers/mt-channel-broker/deployments/controller.yaml

@@ -79,8 +79,6 @@ spec:
           capabilities:
             drop:
             - ALL
-          seccompProfile:
-            type: RuntimeDefault
 
         ports:
         - name: metrics

config/channels/in-memory-channel/deployments/controller.yaml

@@ -80,8 +80,6 @@ spec:
           capabilities:
             drop:
             - ALL
-          seccompProfile:
-            type: RuntimeDefault
 
         ports:
         - name: metrics

config/channels/in-memory-channel/deployments/dispatcher.yaml

@@ -107,5 +107,3 @@ spec:
           capabilities:
             drop:
             - ALL
-          seccompProfile:
-            type: RuntimeDefault

config/core/configmaps/sugar.yaml

@@ -23,33 +23,13 @@ metadata:
   annotations:
     knative.dev/example-checksum: "62dfac6f"
 data:
-  _example: |
-    ################################
-    #                              #
-    #    EXAMPLE CONFIGURATION     #
-    #                              #
-    ################################
-    # This block is not actually functional configuration,
-    # but serves to illustrate the available configuration
-    # options and document them in a way that is accessible
-    # to users that `kubectl edit` this config map.
-    #
-    # These sample configuration options may be copied out of
-    # this example block and unindented to be in the data block
-    # to actually change the configuration.
-
-    # namespace-selector specifies a LabelSelector which
-    # determines which namespaces the Sugar Controller should operate upon
-    # Use an empty value to disable the feature (this is the default):
-    namespace-selector: ""
-
-    # Use an empty object as a string to enable for all namespaces
-    namespace-selector: "{}"
-
-    # trigger-selector specifies a LabelSelector which
-    # determines which triggers the Sugar Controller should operate upon
-    # Use an empty value to disable the feature (this is the default):
-    trigger-selector: ""
-
-    # Use an empty object as string to enable for all triggers
-    trigger-selector: "{}"
+  namespace-selector: |
+    matchExpressions:
+    - key: "eventing.knative.dev/injection"
+      operator: "In"
+      values: ["enabled"]
+  trigger-selector: |
+    matchExpressions:
+    - key: "eventing.knative.dev/injection"
+      operator: "In"
+      values: ["enabled"]

config/core/deployments/controller.yaml

@@ -95,8 +95,6 @@ spec:
           capabilities:
             drop:
             - ALL
-          seccompProfile:
-            type: RuntimeDefault
 
         livenessProbe:
           httpGet:

config/core/deployments/pingsource-mt-adapter.yaml

@@ -100,7 +100,5 @@ spec:
             capabilities:
               drop:
               - ALL
-            seccompProfile:
-              type: RuntimeDefault
 
       serviceAccountName: pingsource-mt-adapter

config/core/deployments/webhook-hpa.yaml

@@ -47,7 +47,7 @@ metadata:
     app.kubernetes.io/version: devel
     app.kubernetes.io/name: knative-eventing
 spec:
-  minAvailable: 80%
+  minAvailable: 1
   selector:
     matchLabels:
       app: eventing-webhook