MyGit

v0.40.0

tektoncd/pipeline

版本发布时间: 2022-09-19 22:16:40

tektoncd/pipeline最新发布版本:v0.63.0(2024-08-31 02:58:24)

🎉 Remote resolution integrated in tektoncd/pipeline with built-in resolvers, Object params and workspace propagation 🎉

-Docs @ v0.40.0 -Examples @ v0.40.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.40.0/release.yaml

Attestation

The Rekor UUID for this release is 362f8ecba72f43264608c9d53c9d192238a7f3e707064fa13e9d670fe3ef016fe82da9ef516f9277

Obtain the attestation:

REKOR_UUID=362f8ecba72f43264608c9d53c9d192238a7f3e707064fa13e9d670fe3ef016fe82da9ef516f9277
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.40.0/release.yaml
REKOR_UUID=362f8ecba72f43264608c9d53c9d192238a7f3e707064fa13e9d670fe3ef016fe82da9ef516f9277

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.40.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Add pipelineRun.spec.pipelineTaskRunTemplate with serviceAccountName and podTemplate.

Workspaces are propagated in embedded specifications of pipelinerun without mutations.

Adds new behavior to the git remote resolver to fetch Tasks and Pipelines from GitHub, Gitlab, BitBucket via their APIs using API tokens.

More flexible ways to provide values for object param keys: a subset of keys can be provided from default, and the rest is provided at runtime.

Add a cluster resolver for referencing Pipeline and Task resources in other namespaces

action required: The separate Resolutions project has been folded into Pipeline. If currently using Resolution, remove the tekton-remote-resolution namespace before upgrading and installing the new "resolvers.yaml".

action required: matrixed params must be moved under matrix.params

Propagating object params

If the user provide affinity in podtempalte it will merge with affinity-assistant's affinity

action required: Need to check podtemplate make sure the change will not cause unexpected behaviour

action required: Remote resolver resource field has changed to params.

Workspaces are propagated in embedded specifications without mutations.

Fixes

Fix regexp for ssh.

Bug fix: allow specifying only timeouts.tasks or timeouts.finally

De-dupe task dependencies - order and resource dependencies all together. It's very common to have a task with multiple when expressions referring to the same task but different results. Maintain a set of dependencies and add only a new parent.

bug fixes:

[Bug fix] Clarify limitrange documentation and remove functionality that's provided by k8s anyway

PipelineRuns will now fail validation for duplicate parameter names or task result references in parameter values

Tekton will retry the creation of the Pod if it fails due to a conflict and results in ResourceQuotaConflictError while updating a ResourceQuota.

Change PipelineRun timeout behavior for child TaskRuns and Runs to behave like cancellation rather than explicitly setting timeouts on the child tasks at runtime.

Misc

Replace holding a Task in dag.Node with a unique string identifier.

Hardening looksLikeResultRef to only report a valid result references, "tasks.<taskName>.results.<resultName>" and "tasks.<taskName>.results.<objectResultName>.<individualAttribute>". Any other invalid look-a-like-result-references are treated as constants.

e2e tests log when a namespace is not deleted at test completion.

Images are based on distroless.dev/* instead of the (equivalent) ghcr.io/distroless/* -- no effective behavior change

Developers - Please file a promotion request using this new template.

Updating error message - when step.onError is set to an invalid value, the error message now double quotes that value to easily spot it.

Add more unit tests to cover the case where non-exist individual keys of an object are used in task step.

Docs

The document has been added that describes the changes needed when migrating from v1beta1 to v1.

The document has been added that describes the changes needed when migrating from v1beta1 to v1.

Updating README to include last two releases details - 0.39 and 0.38.3.

Thanks

Thanks to these contributors who contributed to v0.40.0!

Extra shout-out for awesome release notes:

相关地址：原始地址 下载(tar) 下载(zip)

1、 release.notags.yaml 77.95KB

2、 release.yaml 78.02KB

3、 resolvers.notags.yaml 25.63KB

4、 resolvers.yaml 25.64KB

查看：2022-09-19发行的版本

微信小程序
MyGit:GitHub仓库更新&通知小工具