MyGit

v0.38.2

tektoncd/pipeline

版本发布时间: 2022-08-03 23:35:25

tektoncd/pipeline最新发布版本:v0.63.0(2024-08-31 02:58:24)

-Docs @ v0.38.2 -Examples @ v0.38.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.38.2/release.yaml

Attestation

The Rekor UUID for this release is 362f8ecba72f4326cb27c8cb17e02f54a59ad06cd79f516877b42be38a100da8ddb4e983af82f36d

Obtain the attestation:

REKOR_UUID=362f8ecba72f4326cb27c8cb17e02f54a59ad06cd79f516877b42be38a100da8ddb4e983af82f36d
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.38.2/release.yaml
REKOR_UUID=362f8ecba72f4326cb27c8cb17e02f54a59ad06cd79f516877b42be38a100da8ddb4e983af82f36d

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.38.2@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

Do not panic on ImagePullBackOff in case of status being not fully populated yet

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.38.2!

Extra shout-out for awesome release notes:

相关地址:原始地址 下载(tar) 下载(zip)

1、 release.notags.yaml 75.18KB

2、 release.yaml 75.25KB

查看:2022-08-03发行的版本