Tekton Operator release v0.71.0 "Siberian Stonechat" LTS

🎉 v0.71.0 - LTS 🎉

-Docs @ v0.71.0
-Examples @ v0.71.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.71.0/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.71.0/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.71.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Component	Org	Version
Pipeline	tektoncd	v0.59.0
Dashboard	tektoncd	v0.46.0
Triggers	tektoncd	v0.27.0
Hub	tektoncd	v1.17.0
Chains	tektoncd	v0.20.1
Results	tektoncd	v0.10.0
Pipeline-as-code	openshift-pipelines	v0.27.0
Manual Approval Gate	openshift-pipelines	v0.2.0

Features

• ✨ Add manual approval component in Operator (#2138)

Manual Approval Gate controller can be managed from operator. 
Manual Approval Gate - https://github.com/openshift-pipelines/manual-approval-gate/

• ✨ Expose feature flags for disabling inline spec in Pipelines (#2133)

Inline specifications can be disabled for specific resources only. To achieve that, set the disable-inline-spec in Pipeline properties to a comma-separated list of the desired resources. Valid values are `pipeline`, `pipelinerun` and `taskrun`.

• ✨ [main] adds target namsepace metadata support (#2132)

Under TektonConfig CR, `spec.targetNamespaceMetadata` allows user to update their custom `labels` and `annotations` to the target namespace.

• ✨ SRVKP-4014: Pull tasks from the tekton ecosystem catalog (#2127)

Added new Addon field "namespacedTasks" to support populating openshift-pipelines namespace with tasks similar to the current clusterTasks.

• ✨ [main] HPA creation enabled via options (#2092)

HPA creation enabled

Fixes

• 🐛 Move clustertask and clustertriggerbinding role to component (#2164)
• 🐛 fix: prevent upgrade failures caused by deleting resources (#2121)
• 🐛 [2100] Reconcile a namespace again with missing rolebinding (#2101)
• 🐛 Fix Conflict between Results PreReconciler and Reconciler (#2008)
• 🐛 Fix the results reconciler's manifest reference (#2003)
• 🐛 [main] apply nodeSelector, tolerations, and priorityClassName into pipelines-console-plugin pod (#2109)
• 🐛 [main] perform manifest transformation earlier (#2083)
• 🐛 Fix filter and Transform for TektonResult (#2022)
• 🐛 Fix Results version not reflecting in certain flow (#2007)

Misc

• 🔨 Bound SA Token to Tekton Result API server in OpenShift (#2145)

Bound SA Token to Tekton Result API server Pod and mount it a`t /var/run/secrets/openshift/serviceaccount`.

• 🔨 Deprecate TLSHostnameOverride in TektonResult Properties (#2144)

Deprecate TLSHostnameOverride in TektonResult.Spec Properties

• 🔨 Disallow to update the targetNamespace in TektonConfig CR (#2065)

Disallow to update the targetNamespace in TektonConfig CR

• 🔨 Disallow to update targetNamespace in Hub CR (#2015)

targetNamespace can not be updated from Hub CR. Needs to be deleted the Hub CR first and create HUB CR with new targetNamespace

• 🔨 Bump github.com/tektoncd/triggers from 0.26.2 to 0.27.0 (#2147)
• 🔨 Bump github.com/tektoncd/triggers from 0.26.1 to 0.26.2 (#2140)
• 🔨 Bump github.com/docker/docker from 26.0.0+incompatible to 26.0.2+incompatible (#2131)
• 🔨 Bump github.com/tektoncd/pipeline from 0.58.0 to 0.59.0 (#2130)
• 🔨 Bump golang.org/x/net from 0.22.0 to 0.23.0 (#2120)
• 🔨 Bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 (#2111)
• 🔨 Bump golang.org/x/sync from 0.6.0 to 0.7.0 (#2103)
• 🔨 Bump golang.org/x/mod from 0.16.0 to 0.17.0 (#2102)
• 🔨 Bump github.com/manifestival/client-go-client from 0.5.0 to 0.6.0 (#2080)
• 🔨 Bump github.com/tektoncd/pipeline from 0.57.0 to 0.58.0 (#2079)
• 🔨 Update clusterserviceversion template on bump components (#2076)
• 🔨 Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible (#2058)
• 🔨 Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#2052)
• 🔨 Revert "Fix Conflict between Results PreReconciler and Reconciler" (#2043)
• 🔨 Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 (#2041)
• 🔨 Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 (#2040)
• 🔨 Bump golang.org/x/mod from 0.15.0 to 0.16.0 (#2036)
• 🔨 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#2035)
• 🔨 Bump go.uber.org/zap from 1.26.0 to 1.27.0 (#2028)

Docs

Thanks

Thanks to these contributors who contributed to v0.71.0!

• ❤️ @Aneesh-M-Bhat
• ❤️ @MMartyn
• ❤️ @PuneetPunamiya
• ❤️ @anithapriyanatarajan
• ❤️ @arnoldmashava
• ❤️ @dependabot[bot]
• ❤️ @jimmyjones2
• ❤️ @jkandasa
• ❤️ @jkhelil
• ❤️ @khrm
• ❤️ @l-qing
• ❤️ @piyush-garg
• ❤️ @pratap0007
• ❤️ @tekton-robot
• ❤️ @vdemeester

Extra shout-out for awesome release notes:

• 😍 @Aneesh-M-Bhat
• 😍 @MMartyn
• 😍 @PuneetPunamiya
• 😍 @jimmyjones2
• 😍 @jkandasa
• 😍 @jkhelil
• 😍 @khrm
• 😍 @l-qing
• 😍 @piyush-garg
• 😍 @pratap0007
• 😍 @tekton-robot

tekton-operator-0.71.0

A Helm chart to deploy the Tekton Operator and its CRDs

tekton-operator-0.70.2

A Helm chart to deploy the Tekton Operator and its CRDs

Tekton Operator release v0.70.2 "Spotted Dove LTS"

-Docs @ v0.70.2
-Examples @ v0.70.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.70.2/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.70.2/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.70.2@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

What's Changed

• [release-v0.70.x] Fix Conflict between Results PreReconciler and Reconciler by @tekton-robot in #2016
• [release-v0.70.x] Fix Results version not reflecting in certain flow by @tekton-robot in #2017
• [release-v0.70.x] Fix the results reconciler's manifest reference by @tekton-robot in #2018
• [release-v0.70.x] Fix filter and Transform for TektonResult by @tekton-robot in #2025
• Revert "Added filesystem-custom-path to allowed x509 fulcio providers" by @PuneetPunamiya in #2030
• [bot] bump payload versions by @github-actions in #2039
• [bot] bump payload versions by @github-actions in #2045
• [v0.70.x] prepare v0.70.1 patch release by @jkandasa in #2046
• [bot] bump payload versions by @github-actions in #2048
• [release-v0.70.x] update OpenShift bundle features annotations by @tekton-robot in #2055
• [v0.70.x] prepare v0.70.2 patch release by @jkandasa in #2056
• [bot] bump payload versions by @github-actions in #2062
• [release-0.70.x] Update component versions in the clusterserviceversi… by @vdemeester in #2067
• [bot] bump payload versions by @github-actions in #2070
• [bot] bump payload versions by @github-actions in #2074
• Bump tkn version to v0.35.2 by @piyush-garg in #2077
• [bot] bump payload versions by @github-actions in #2088
• [release-v0.70.x] perform manifest transformation earlier by @tekton-robot in #2090
• [bot] bump payload versions by @github-actions in #2106
• [release-v0.70.x] apply nodeSelector, tolerations, and priorityClassName into pipelines-console-plugin pod by @tekton-robot in #2110
• [release-v0.70.x] HPA creation enabled via options by @tekton-robot in #2112
• [release-v0.70.x] [2100] Reconcile a namespace again with missing rolebinding by @tekton-robot in #2113
• [release-v0.70.x] Wrap errors with more context while creating resources in the operator by @tekton-robot in #2114
• [0.70.0] update kubernetes release artifacts bundle by @jkandasa in #2013

Full Changelog: v0.70.0...v0.70.2

Thanks

Thanks to these contributors who contributed to v0.70.2!

• ❤️ @PuneetPunamiya
• ❤️ @github-actions[bot]
• ❤️ @jkandasa
• ❤️ @piyush-garg
• ❤️ @tekton-robot
• ❤️ @vdemeester

Extra shout-out for awesome release notes:

• 😍 @PuneetPunamiya
• 😍 @piyush-garg
• 😍 @tekton-robot

Tekton Operator release v0.70.0 "Spotted Dove LTS"

-Docs @ v0.70.0
-Examples @ v0.70.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.70.0/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.70.0/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.70.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• ✨ Adds recently added pipelinerun and builder artifacts to chains spec (#1999)

Adds support for `artifacts.pipelinerun.enable-deep-inspection` and `builddefinition.buildtype` to Chains spec

• ✨ Update the volumes of pipelines-scc to add support for CSI. (#1958)

SecurityContextConstraints (SCC) pipelines-scc now supports CSI Volume Types

• ✨ Add OpenShift PostReconcile Extension for Results Route RBAC (#1947)

system:authenticated user can view route for Tekton Results API endpoints.

• ✨ [main] add hpa under options and support pod template labels and annotations (#1942)

- Added support to update HorizontalPodAutoscaler via `options`. create HPA options is disabled see https://github.com/tektoncd/operator/issues/2002
- Added support for adding labels and annotations on Deployments and StatefulSets podTemplate via `options`.

• ✨ Add config leader election configmaps (#1935)

Add config leader election configmaps for operator controller, operator webhook and proxy webhook

• ✨ [main] manage pipeline console plugin deployment on openshift (#1895)

Fixes

• 🐛 Add Transformer for Watcher Container Env (#1966)
• 🐛 [main] include webhook podname in charts deployment (#1936)
• 🐛 [main] ignore nested struct in AddConfigMapValues transformer (#1848)

Misc

• 🔨 Bump github.com/tektoncd/triggers from 0.25.3 to 0.26.0 (#1970)
• 🔨 Bump golang.org/x/mod from 0.14.0 to 0.15.0 (#1969)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.23.0 to 0.24.0 (#1963)
• 🔨 Bump github.com/tektoncd/pipeline from 0.55.0 to 0.56.0 (#1945)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.22.6 to 0.23.0 (#1932)
• 🔨 Bump golang.org/x/sync from 0.5.0 to 0.6.0 (#1923)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.22.5 to 0.22.6 (#1922)
• 🔨 Bump github.com/tektoncd/pipeline from 0.54.0 to 0.55.0 (#1908)
• 🔨 Bump github.com/spf13/viper from 1.18.1 to 1.18.2 (#1907)
• 🔨 Bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#1902)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.22.4 to 0.22.5 (#1901)
• 🔨 Bump github.com/spf13/viper from 1.17.0 to 1.18.1 (#1892)
• 🔨 Bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.2 (#1891)
• 🔨 Bump github.com/tektoncd/pipeline from 0.53.2 to 0.54.0 (#1889)

Docs

Thanks

Thanks to these contributors who contributed to v0.70.0!

• ❤️ @PuneetPunamiya
• ❤️ @bdellegrazie
• ❤️ @davidumea
• ❤️ @dependabot[bot]
• ❤️ @jkandasa
• ❤️ @khrm
• ❤️ @matzew
• ❤️ @piyush-garg
• ❤️ @pratap0007
• ❤️ @sabre1041
• ❤️ @savitaashture
• ❤️ @sudhishmk
• ❤️ @tekton-robot
• ❤️ @vdemeester

Extra shout-out for awesome release notes:

• 😍 @PuneetPunamiya
• 😍 @bdellegrazie
• 😍 @davidumea
• 😍 @jkandasa
• 😍 @khrm
• 😍 @matzew
• 😍 @piyush-garg
• 😍 @pratap0007
• 😍 @sabre1041
• 😍 @savitaashture
• 😍 @tekton-robot

tekton-operator-0.70.0

A Helm chart to deploy the Tekton Operator and its CRDs

Tekton Operator release v0.69.1 "Black Drongo LTS"

-Docs @ v0.69.1
-Examples @ v0.69.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.69.1/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.69.1/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.69.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• ✨ Add support to update PriorityClassName via options (#1844)

Allow to update PriorityClassName via options in Deployment and StatefulSet

Fixes

• 🐛 [release-v0.69.x] Fix config leader election configmap name (#1882)
• 🐛 ignore replicas for the resources which is managed by HPA (#1752)

 If a Deployment or StatefulSet has a Horizontal Pod Autoscaling (HPA) and is in active state, Operator will not control the replicas to that resource. However if `status.desiredReplicas` and `spec.minReplicas` not present in HPA, operator takes the control. Also if HPA disabled, operator takes control. Even though the operator takes the control, the replicas value will be adjusted to the hpa's scaling range.

• 🐛 [release-v0.69.x] fix 'G601: Implicit memory aliasing in for loop' linter issue on cabundle.go file (#1888)
• 🐛 [release-v0.69.x] fix operator webhook upgrade issue by adding unique identifier and revert gracefulTermination (#1884)
• 🐛 [release-v0.69.x] fix operator webhook installerset deletion race condition (#1875)
• 🐛 continue the post upgrade on storage migration errors (#1753)
• 🐛 fix role in openshift and include upgrade status (#1750)

Misc

• 🔨 Bump golang.org/x/mod from 0.13.0 to 0.14.0 (#1834)
• 🔨 Bump github.com/go-logr/zapr from 1.2.4 to 1.3.0 (#1833)
• 🔨 Bump golang.org/x/sync from 0.4.0 to 0.5.0 (#1832)
• 🔨 Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#1831)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.21.2 to 0.21.5 (#1825)
• 🔨 Disable HTTP/2 for webhoook by updating Knative (#1822)
• 🔨 Bump github.com/tektoncd/pipeline from 0.52.1 to 0.53.0 (#1815)
• 🔨 Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#1814)
• 🔨 Bump github.com/docker/docker from 24.0.0+incompatible to 24.0.7+incompatible (#1813)
• 🔨 Bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#1808)
• 🔨 Bump github.com/tektoncd/triggers from 0.25.0 to 0.25.2 (#1802)
• 🔨 Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 (#1777)
• 🔨 Bump github.com/tektoncd/pipeline from 0.52.0 to 0.52.1 (#1776)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.21.1 to 0.21.2 (#1775)
• 🔨 Bump golang.org/x/net from 0.15.0 to 0.17.0 (#1770)
• 🔨 Bump golang.org/x/mod from 0.12.0 to 0.13.0 (#1765)
• 🔨 Bump github.com/spf13/viper from 1.16.0 to 1.17.0 (#1764)
• 🔨 Bump golang.org/x/sync from 0.3.0 to 0.4.0 (#1763)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.21.0 to 0.21.1 (#1759)
• 🔨 Bump github.com/tektoncd/pipeline from 0.51.0 to 0.52.0 (#1708)
• 🔨 Bump gotest.tools/v3 from 3.5.0 to 3.5.1 (#1706)
• 🔨 Bump go.uber.org/zap from 1.25.0 to 1.26.0 (#1704)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.20.0 to 0.21.0 (#1695)
• 🔨 Bump github.com/tektoncd/pipeline from 0.49.0 to 0.51.0 (#1658)

Docs

Thanks

Thanks to these contributors who contributed to v0.69.1!

• ❤️ @Basavaraju-G
• ❤️ @cmorinupgrade
• ❤️ @concaf
• ❤️ @dependabot[bot]
• ❤️ @github-actions[bot]
• ❤️ @jkandasa
• ❤️ @khrm
• ❤️ @piyush-garg
• ❤️ @pratap0007
• ❤️ @tekton-robot
• ❤️ @uqix
• ❤️ @vdemeester

Extra shout-out for awesome release notes:

• 😍 @cmorinupgrade
• 😍 @concaf
• 😍 @jkandasa
• 😍 @khrm
• 😍 @piyush-garg
• 😍 @pratap0007
• 😍 @tekton-robot
• 😍 @uqix

tekton-operator-0.69.1

A Helm chart to deploy the Tekton Operator and its CRDs

Tekton Operator release v0.68.1 "Rock Sparrow LTS"

-Docs @ v0.68.1
-Examples @ v0.68.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.68.1/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.68.1/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.68.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

• bumps operand components version
• contains bug fixes

Features

Fixes

• 🐛 [release-v0.68.x] Add list nodes rule for kubernetes-rbac (#1760)

our release note here

• 🐛 [release-v0.68.x] ignore replicas for the resources which is managed by HPA (#1755)

  If a Deployment or StatefulSet has a Horizontal Pod Autoscaling (HPA) and is in active state, Operator will not control the replicas to that resource. However if `status.desiredReplicas` and `spec.minReplicas` not present in HPA, operator takes the control. Also if HPA disabled, operator takes control. Even though the operator takes the control, the replicas value will be adjusted to the hpa's scaling range.
  

• 🐛 [release-v0.68.x] continue the post upgrade on storage migration errors (#1754)
• 🐛 [release-v0.68.x] fix role in openshift and include upgrade status (#1751)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.68.1!

• ❤️ @concaf
• ❤️ @github-actions[bot]
• ❤️ @jkandasa
• ❤️ @khrm
• ❤️ @piyush-garg
• ❤️ @pratap0007
• ❤️ @tekton-robot

Extra shout-out for awesome release notes:

• 😍 @pratap0007
• 😍 @tekton-robot

tekton-operator-0.68.0

A Helm chart to deploy the Tekton Operator and its CRDs