MyGit

v0.41.0

tektoncd/pipeline

版本发布时间: 2022-10-31 22:32:41

tektoncd/pipeline最新发布版本:v0.63.0(2024-08-31 02:58:24)

🎉 First LTS Release, many features promoted to beta and a new Artifact Hub Resolver !🎉

Remote Resolution, Propagated Parameters, CSI and Projected Workspaces promoted to Beta!

-Docs @ v0.41.0 -Examples @ v0.41.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.41.0/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a0f387ec5597ae094fc78efb152ca50f4bc02f99149e5d324261f4fc32d28f92f

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a0f387ec5597ae094fc78efb152ca50f4bc02f99149e5d324261f4fc32d28f92f
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.41.0/release.yaml
REKOR_UUID=24296fb24b8ad77a0f387ec5597ae094fc78efb152ca50f4bc02f99149e5d324261f4fc32d28f92f

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.41.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Upgrade Notices

Actions Required

Deprecation Notices

Backwards incompatible changes

Changes

Features

The Hub Resolver will have a new type field to indicate the type of Hub from where to pull the resource. The default hub type is updated from the Tekton Hub to the Artifact Hub. Please see more details in TEP-0115

CSI workspaces are promoted to beta/stable API

Add more details (start time, end time, owner) in the default view of resource resolutions

Propagated Parameters extended to Finally tasks.

Add Provenance field in TaskRun&PipelineRun status that wraps all the information we might need from pipeline side.

It only contains ConfigSource at the moment, but it can be extended to have more subfields in future.

Add provenance-related field in ResolutionRequest.status.

Promote propagated parameters to beta.

Projected workspaces are promoted to beta/stable API

action required: Any resolvers being used other than built-in resolvers will need to be updated to use ResolutionRequest v1beta1. Remote resolution of Pipelines and Tasks promoted to beta, and ResolutionRequest v1beta1 introduced to support array and object parameters for resolvers.

Fixes

Action required: If using Kubernetes 1.22, set PodSecurity flag to true to enforce a restricted pod security level in Tekton namespaces. See https://kubernetes.io/docs/reference/command-line-tools-reference/feature-gates/#feature-gates-for-graduated-or-deprecated-features for more information.

Bug fix: skip validation of CRDs on deletion

The PipelineRun and TaskRun controller will not override label set by other tools during the reconciler loop, and will merge them instead

Fix TaskRun parameter etc replacement logic to persist in the TaskRun's Status properly

Fix PipelineRun hang on Unknown status when duplicated params are defined in a PipelineTask

Variable replacement is now properly performed for workspace sub-paths in finally tasks.

Fix taskrun not working with workspace having volumeClaimTemplate

action required: To allow PodSecurityAdmission to take effect, please set PodSecurity flag as Beta in 1.23-1.24. See https://kubernetes.io/docs/reference/command-line-tools-reference/feature-gates/#feature-gates-for-graduated-or-deprecated-features for more information.

ACTION REQUIRED: Starting from this release, Custom Task Runs controllers need to implement the Timeout on your own, PipelineRun reconciler would not set Run.Spec.Status == RunCancelled upon Run timeout.

Misc

Separate resolvers.yaml manifest removed because resolvers are now included in release.yaml

pipelineRef.bundle and taskRef.bundle are deprecated in favor of using the bundles resolver

Update knative.dev/pkg dependency for support of k8s 1.25.x

Binary file (standard input) matches

Images are based on cgr.dev/chainguard/* instead of the exactly equivalent distroless.dev/* image references.

Update aggregate ClusterRoles to include Run resources used for custom tasks and remove references to Condition which was removed in v0.37.0

Action required: ClusterTasks are deprecated. Please use the cluster resolver instead.

Renames the resources to computeResources of task.spec.steps[].resources, task.spec.stepTemplate.resources, task.spec.sidecars[].resources, taskRun.spec.stepOverrides[].resources, taskrun.spec.sidecarOverrides[].resources. Renames stepOverrides and sidecarOverrides to stepSpecs and sidecarSpecs.

Webhook HPA uses autoscaling/v2 instead of the deprecated autoscaling/v2beta1. This also brings the minimum kubernetes version to v1.23.0

Docs

Thanks

Thanks to these contributors who contributed to v0.41.0!

Extra shout-out for awesome release notes:

Many thanks to 🐱 purr programmer Gigi too! Gigi & Robocat Besties Gigi & Robocat

Gigi says "congratulation on the graduation, Tekton!" Gigi says congrats!

相关地址：原始地址 下载(tar) 下载(zip)

1、 release.notags.yaml 102.34KB

2、 release.yaml 102.42KB

查看：2022-10-31发行的版本

微信小程序
MyGit:GitHub仓库更新&通知小工具