Releases: tektoncd/pipeline
Tekton Pipeline release v0.62.4 "Ragamuffin Reventlov"
-Docs @ v0.62.4
-Examples @ v0.62.4
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.4/release.yaml
Attestation
The Rekor UUID for this release is 108e9186e8c5677a294d223044005f4caffd3b6b20afcfcc96849fd9b2cdbcb170ca741ab440fb83
Obtain the attestation:
REKOR_UUID=108e9186e8c5677a294d223044005f4caffd3b6b20afcfcc96849fd9b2cdbcb170ca741ab440fb83
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.4/release.yaml
REKOR_UUID=108e9186e8c5677a294d223044005f4caffd3b6b20afcfcc96849fd9b2cdbcb170ca741ab440fb83
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.62.4@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- π [release-v0.62.x] Fix isolated workspaces ignored when using StepTemplate (#8273)
solated workspaces are now correctly set when using in conjuction with StepTemplate
- π [release-v0.62.x] Mark steps as deleted when TaskRun fails (#8295)
Misc
- π¨ [release-v0.62.x] Backport release "scripts" changes from mainβ¦ (#8332)
Docs
Thanks
Thanks to these contributors who contributed to v0.62.4!
- β€οΈ @tekton-robot
- β€οΈ @vdemeester
Extra shout-out for awesome release notes:
- π @tekton-robot
Tekton Pipeline release v0.59.4 "Scottish Fold Sox"
-Docs @ v0.59.4
-Examples @ v0.59.4
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.4/release.yaml
Attestation
The Rekor UUID for this release is 108e9186e8c5677ac434e5a611e150eb519bc1caa8020f7c0cbc114f780104b2ea371633e61c4fed
Obtain the attestation:
REKOR_UUID=108e9186e8c5677ac434e5a611e150eb519bc1caa8020f7c0cbc114f780104b2ea371633e61c4fed
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.4/release.yaml
REKOR_UUID=108e9186e8c5677ac434e5a611e150eb519bc1caa8020f7c0cbc114f780104b2ea371633e61c4fed
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.59.4@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- π [release-v0.59.x] Fix isolated workspaces ignored when using StepTemplate (#8275)
Isolated workspaces are now correctly set when using in conjuction with StepTemplate
- π [release-v0.59.x] pkg/taskrunmetrics/fake shouldn't be importedβ¦ (#8189)
- π [release-v0.59.x] Mark steps as deleted when TaskRun fails (#8296)
Misc
- π¨ [release-v0.59.x] Backport release "scripts" changes from mainβ¦ (#8333)
Docs
Thanks
Thanks to these contributors who contributed to v0.59.4!
- β€οΈ @tekton-robot
- β€οΈ @vdemeester
Extra shout-out for awesome release notes:
- π @vdemeester
Tekton Pipeline release v0.56.8 "Persian Terminator"
-Docs @ v0.56.8
-Examples @ v0.56.8
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.8/release.yaml
Attestation
The Rekor UUID for this release is 108e9186e8c5677a5b4581e15383f9656d8670176e2efc73ddba6d9d589cbbc9cf01b11134735ff9
Obtain the attestation:
REKOR_UUID=108e9186e8c5677a5b4581e15383f9656d8670176e2efc73ddba6d9d589cbbc9cf01b11134735ff9
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.8/release.yaml
REKOR_UUID=108e9186e8c5677a5b4581e15383f9656d8670176e2efc73ddba6d9d589cbbc9cf01b11134735ff9
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.56.8@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- π [release-v0.56.x] Fix isolated workspaces ignored when using StepTemplate (#8276)
Isolated workspaces are now correctly set when using in conjuction with StepTemplate
- π [release-v0.56.x] pkg/taskrunmetrics/fake shouldn't be importedβ¦ (#8190)
- π [release-v0.56.x] Mark steps as deleted when TaskRun fails (#8297)
Misc
- π¨ [release-v0.56.x] Backport release "scripts" changes from mainβ¦ (#8334)
Docs
Thanks
Thanks to these contributors who contributed to v0.56.8!
- β€οΈ @tekton-robot
- β€οΈ @vdemeester
Extra shout-out for awesome release notes:
- π @vdemeester
Tekton Pipeline release v0.53.9 "Chartreux Rachael"
-Docs @ v0.53.9
-Examples @ v0.53.9
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.9/release.yaml
Attestation
The Rekor UUID for this release is 108e9186e8c5677af0438dbd9a6a78cfff85c4f50e776ded7dc354778dc0fecd5adb124d07763c11
Obtain the attestation:
REKOR_UUID=108e9186e8c5677af0438dbd9a6a78cfff85c4f50e776ded7dc354778dc0fecd5adb124d07763c11
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.9/release.yaml
REKOR_UUID=108e9186e8c5677af0438dbd9a6a78cfff85c4f50e776ded7dc354778dc0fecd5adb124d07763c11
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.53.9@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- π [release-v0.53.x] Fix isolated workspaces ignored when using StepTemplate (#8277)
Isolated workspaces are now correctly set when using in conjuction with StepTemplate
- π [release-v0.53.x] pkg/taskrunmetrics/fake shouldn't be importedβ¦ (#8191)
- π [release-v0.53.x] Mark steps as deleted when TaskRun fails (#8299)
Misc
- π¨ [release-v0.53.x] Backport release "scripts" changes from mainβ¦ (#8335)
Docs
Thanks
Thanks to these contributors who contributed to v0.53.9!
- β€οΈ @afrittoli
- β€οΈ @tekton-robot
- β€οΈ @vdemeester
Extra shout-out for awesome release notes:
- π @vdemeester
Tekton Pipeline release v0.64.0 "Ragamuffin Reventlov"
π Released Container Images stored on ghcr.io π
-Docs @ v0.64.0
-Examples @ v0.64.0
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.64.0/release.yaml
Attestation
The Rekor UUID for this release is 108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8
Obtain the attestation:
REKOR_UUID=108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.64.0/release.yaml
REKOR_UUID=108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.64.0@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
- β¨ Implement set-security-context feature for affinity assistant containers (#8182)
Affinity Assistant containers will now have a securityContext when feature flag set-security-context
is enabled in ConfigMap feature-flags
.
Fixes
- π Fix isolated workspaces ignored when using StepTemplate (#8272)
Isolated workspaces are now correctly set when using in conjuction with StepTemplate
- π fix(TaskRun): fixed the issue where some step statuses might not be correctly updated in failed TaskRun (#8270)
fix: fixed the issue where some step statuses might not be correctly updated in failed TaskRun
- π fix(pipelinerun): resolve issue with PipelineRun not timing out successfully (#8236)
fix(pipelinerun): resolve issue with PipelineRun not timing out successfully
- π fix(e2e): stabilize TestTaskRunFailure test (#8174)
- π Mark steps as deleted when TaskRun fails (#8294)
Misc
- π¨ Bump the all group across 1 directory with 4 updates (#8300)
- π¨ Pin setup-go action (#8291)
- π¨ Simply the path for the base image (#8290)
- π¨ Bump github/codeql-action from 3.26.7 to 3.26.8 (#8289)
- π¨ Pin alpine image used in release pipeline (#8287)
- π¨ Update to the latest version of koparse for the release pipeline (#8285)
- π¨ Bump google.golang.org/grpc from 1.64.1 to 1.67.0 (#8281)
- π¨ Use the new version of koparse in the build (#8278)
- π¨ Bump step-security/harden-runner from 2.9.1 to 2.10.1 (#8269)
- π¨ Bump tj-actions/changed-files from 45.0.1 to 45.0.2 (#8268)
- π¨ Bump github/codeql-action from 3.26.6 to 3.26.7 (#8267)
- π¨ Bump the all group in /tekton with 4 updates (#8266)
- π¨ Adapt koparse step to handle no import path (#8261)
- π¨ Add KO_EXTRA_ARGS (#8260)
- π¨ Propagate image registry regions to publish (#8259)
- π¨ Fix the imageRegistryUser param usage in the release pipeline (#8256)
- π¨ build(deps): bump the all group in /tekton with 4 updates (#8253)
- π¨ Run build and tests conditionally (#8252)
- π¨ Support separate bucket and image reg creds (#8251)
- π¨ Add OCI source label to images (#8247)
- π¨ Make image registry regions configurable (#8246)
- π¨ build(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#8245)
- π¨ build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 (#8244)
- π¨ build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 (#8243)
- π¨ build(deps): bump the all group across 1 directory with 4 updates (#8235)
- π¨ build(deps): bump tj-actions/changed-files from 45.0.0 to 45.0.1 (#8233)
- π¨ build(deps): bump github/codeql-action from 3.26.3 to 3.26.6 (#8232)
Docs
- π Update releases for new Tekton Pipeline Releases 0.63 (#8229)
Thanks
Thanks to these contributors who contributed to v0.64.0!
- β€οΈ @AlanGreene
- β€οΈ @afrittoli
- β€οΈ @chitrangpatel
- β€οΈ @dependabot[bot]
- β€οΈ @kristofferchr
- β€οΈ @l-qing
- β€οΈ @vdemeester
Extra shout-out for awesome release notes:
- π @kristofferchr
- π @l-qing
- π @vdemeester
Tekton Pipeline release v0.62.3 "Birman HAL LTS"
-Docs @ v0.62.3
-Examples @ v0.62.3
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.3/release.yaml
Attestation
The Rekor UUID for this release is 108e9186e8c5677aa407357ea4e4be089c72e70eb6e12acb4d1bc92eec85f0c0fba54abc89790342
Obtain the attestation:
REKOR_UUID=108e9186e8c5677aa407357ea4e4be089c72e70eb6e12acb4d1bc92eec85f0c0fba54abc89790342
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.3/release.yaml
REKOR_UUID=108e9186e8c5677aa407357ea4e4be089c72e70eb6e12acb4d1bc92eec85f0c0fba54abc89790342
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.62.3@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- π [release-v0.62.x] Fix Artifact type to a pointer (#8228)
Fix Artifact type to a pointer.
- π [release-v0.62.x] apply default-container-resource-requirements before LimitRange transformer (#8227)
[Bug fix]: default-container-resource-requirements
will be applied to the container before LimtRange
Misc
Docs
Thanks
Thanks to these contributors who contributed to v0.62.3!
- β€οΈ @tekton-robot
- β€οΈ @vdemeester
Extra shout-out for awesome release notes:
- π @tekton-robot
- π @vdemeester
Tekton Pipeline release v0.63.0 "Abyssinian K-9"
-Docs @ v0.63.0
-Examples @ v0.63.0
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.63.0/release.yaml
Attestation
The Rekor UUID for this release is 108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e
Obtain the attestation:
REKOR_UUID=108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.63.0/release.yaml
REKOR_UUID=108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.63.0@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
- β¨ cluster-reslover: add support for StepAction (#8199)
tepAction are now supported to a refered via the cluster resolver.
- β¨ Allow securityContext field for affinity assistant podtemplate (#8176)
Added the ability to set the pod-level securityContext
for the AffinityAssistant StatefulSet.
This can be configured by providing a default-affinity-assistant-pod-template
in the config-defaults
ConfigMap or by specifying a pod template in TaskRun
or PipelineRun
.
- β¨ Add UID label to PipelineRun and TaskRun (#8166)
TaskRun pods have tekton.dev/taskRunUID and tekton.dev/pipelineRunUID labels
Fixes
- π Fix Artifact type to a pointer (#8226)
Fix Artifact type to a pointer.
- π fix task name show in metric (#8216)
fix clusterTask name show anonymous
in metric
- π apply default-container-resource-requirements before LimitRange transformer (#8197)
[Bug fix]: default-container-resource-requirements
will be applied to the container before LimtRange
- π fix(pipelinerun): resolve issue where canceling active pipelinerun fails (#8173)
fix(pipelinerun): resolve issue where canceling active pipelinerun fails
- π fix(taskrun): resolve issue with TaskRun not failing promptly after Pod OOM (#8171)
fix(taskrun): resolve issue with TaskRun not failing promptly after Pod OOM
- π fix: If the finally timeout is set to 0s, the calculates the next queue entry time according to the pipeline timeout. (#8056)
If the finally timeout is set to 0s, the reconciler
calculates the next queue entry time according to the pipeline timeout.
- π feat(matrix): Fix matrix param type mismatch problem for ref array result from customrun scenario (#8024)
Misc
- π¨ build(deps): bump tj-actions/changed-files from 44.5.7 to 45.0.0 (#8223)
- π¨ build(deps): bump github.com/golangci/golangci-lint from 1.59.1 to 1.60.3 in /tools (#8219)
- π¨ build(deps): bump github.com/docker/docker from 26.1.3+incompatible to 26.1.5+incompatible (#8218)
- π¨ Bump the all group in /tekton with 4 updates (#8212)
- π¨ Bump github/codeql-action from 3.26.0 to 3.26.3 (#8211)
- π¨ Bump the all group in /tekton with 4 updates (#8204)
- π¨ Bump actions/upload-artifact from 4.3.5 to 4.3.6 (#8203)
- π¨ Bump step-security/harden-runner from 2.9.0 to 2.9.1 (#8202)
- π¨ Bump github/codeql-action from 3.25.15 to 3.26.0 (#8201)
- π¨ {taskrun,pipelinerun}metrics: make sure config is up-to-date (#8187)
- π¨ Bump the all group in /tekton with 2 updates (#8180)
- π¨ Bump actions/upload-artifact from 4.3.4 to 4.3.5 (#8179)
- π¨ Bump tj-actions/changed-files from 44.5.5 to 44.5.7 (#8178)
- π¨ Bump github/codeql-action from 3.25.13 to 3.25.15 (#8162)
- π¨ Bump ossf/scorecard-action from 2.3.3 to 2.4.0 (#8161)
- π¨ Bump the all group in /tekton with 4 updates (#8160)
- π¨ Bump go.opentelemetry.io/otel/sdk from 1.27.0 to 1.28.0 (#8154)
Docs
- π docs: fix links to Matrix examples (#7953)
Thanks
Thanks to these contributors who contributed to v0.63.0!
- β€οΈ @AverageMarcus
- β€οΈ @chengjoey
- β€οΈ @chitrangpatel
- β€οΈ @cugykw
- β€οΈ @dependabot[bot]
- β€οΈ @hittyt
- β€οΈ @jkandasa
- β€οΈ @khrm
- β€οΈ @kristofferchr
- β€οΈ @l-qing
- β€οΈ @vdemeester
Extra shout-out for awesome release notes:
- π @chengjoey
- π @chitrangpatel
- π @cugykw
- π @jkandasa
- π @khrm
- π @kristofferchr
- π @l-qing
- π @vdemeester
Tekton Pipeline release v0.62.2 "Birman HAL LTS"
-Docs @ v0.62.2
-Examples @ v0.62.2
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.2/release.yaml
Attestation
The Rekor UUID for this release is 108e9186e8c5677a6e62d0e6c909ccb98a5768c17110fecb8c493b0a3c670644a0e1d3cdf4a584b5
Obtain the attestation:
REKOR_UUID=108e9186e8c5677a6e62d0e6c909ccb98a5768c17110fecb8c493b0a3c670644a0e1d3cdf4a584b5
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.2/release.yaml
REKOR_UUID=108e9186e8c5677a6e62d0e6c909ccb98a5768c17110fecb8c493b0a3c670644a0e1d3cdf4a584b5
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.62.2@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- π [release-v0.62.x] check namespace config for node throttle metric (#8213)
ith this fix the 'config-observabilitiy' configmap setting 'metrics.taskrun.throttle.enable-namespace' is now checked before incrementing the 'tekton_pipelines_controller_running_taskruns_throttled_by_node', where previously that config value was not being checked for the metric.
- π [release-v0.62.x] {taskrun,pipelinerun}metrics: make sure config is up-to-date (#8198)
- π [release-v0.62.x] pkg/taskrunmetrics/fake shouldn't be importedβ¦ (#8188)
Misc
Docs
Thanks
Thanks to these contributors who contributed to v0.62.2!
- β€οΈ @tekton-robot
Extra shout-out for awesome release notes:
- π @tekton-robot
Tekton Pipeline release v0.56.7 "Persian Terminator"
-Docs @ v0.56.7
-Examples @ v0.56.7
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.7/release.yaml
Attestation
The Rekor UUID for this release is 24296fb24b8ad77a4ec4894662098e70458099040db8cd51697bfec03fd2650c7285ce3a94c50119
Obtain the attestation:
REKOR_UUID=24296fb24b8ad77a4ec4894662098e70458099040db8cd51697bfec03fd2650c7285ce3a94c50119
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.7/release.yaml
REKOR_UUID=24296fb24b8ad77a4ec4894662098e70458099040db8cd51697bfec03fd2650c7285ce3a94c50119
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.56.7@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- π [release-v0.56.x] Refine check if the result is from a matrix task (#8169)
ixed variable substitution of results from matrix TaskRuns with cardinality of 1.
- π [release-v0.56.x] Perform matrix results validation on only result ref params (#8120)
Perform matrix results validation on only result ref params
Misc
Docs
Thanks
Thanks to these contributors who contributed to v0.56.7!
- β€οΈ @piyush-garg
- β€οΈ @tekton-robot
Extra shout-out for awesome release notes:
- π @piyush-garg
- π @tekton-robot
Tekton Pipeline release v0.62.1 "Birman HAL LTS"
-Docs @ v0.62.1
-Examples @ v0.62.1
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.1/release.yaml
Attestation
The Rekor UUID for this release is 24296fb24b8ad77a888f88120c037b3b7b9b3be97d8dd4ea1950235f44033f29dce4a1123992a3d9
Obtain the attestation:
REKOR_UUID=24296fb24b8ad77a888f88120c037b3b7b9b3be97d8dd4ea1950235f44033f29dce4a1123992a3d9
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.1/release.yaml
REKOR_UUID=24296fb24b8ad77a888f88120c037b3b7b9b3be97d8dd4ea1950235f44033f29dce4a1123992a3d9
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.62.1@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- π [release-v0.62.x] Refine check if the result is from a matrix task (#8167)
ixed variable substitution of results from matrix TaskRuns with cardinality of 1.
Misc
Docs
Thanks
Thanks to these contributors who contributed to v0.62.1!
- β€οΈ @tekton-robot
Extra shout-out for awesome release notes:
- π @tekton-robot