Tekton Pipeline release v0.54.0 "Korat Bender"

[jerop]

🎉 Reusable Steps via StepActions, Param Enums, HTTP Resolver! 🎉

-Docs @ v0.54.0
-Examples @ v0.54.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.54.0/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a6a820444f8789f9b68835a66c6c0ad3cecabee051b9af0c824b04baf1b57433c

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a6a820444f8789f9b68835a66c6c0ad3cecabee051b9af0c824b04baf1b57433c
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.54.0/release.yaml
REKOR_UUID=24296fb24b8ad77a6a820444f8789f9b68835a66c6c0ad3cecabee051b9af0c824b04baf1b57433c

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.54.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• ✨ TEP-0142: Surface step results via sidecar logs (TEP-0142: Surface step results via sidecar logs #7414)

  Surface step results via sidecar logs

• ✨ TEP-0142: Introduce StepResults in Steps, StepActions (TEP-0142: Introduce StepResults in Steps, StepActions #7382)

  Introduce StepResults in Steps for StepAction's Result storage.

• ✨ TEP-0142: Surface step results via termination message (TEP-0142: Surface step results via termination message #7349)

  Surface step results via termination message

• ✨ TEP-0142: Introduce Value in TaskResults (TEP-0142: Introduce Value in TaskResults #7347)

  StepActions: Introduce Value in TaskResults

• ✨ [TEP-0142] Add VolumeMounts to StepAction ([TEP-0142] Add VolumeMounts to StepAction #7340)

  Users can define VolumeMounts in StepAction, the VolumeMounts Name should use string param reference to the params passed to the StepAction.

• ✨ [TEP-0144] Validate PipelineRun for Param Enum ([TEP-0144] Validate PipelineRun for Param Enum #7338)

  Implement Param Enum validation for PipelineRuns. Param Enum is supported per TEP-0144

• ✨ [TEP-0142] Add SecurityContext ([TEP-0142] Add SecurityContext #7337)

  Users can declare SecurityContext in StepAction.

• ✨ TEP-0142: Add support for params between Step and StepActions (TEP-0142: Add support for params between Step and StepActions #7332)

  Completes support for params in StepActions.

• ✨ [TEP-0144] Validate TaskRun for Param Enum ([TEP-0144] Validate TaskRun for Param Enum #7326)

  Implement Param Enum validation for TaskRuns

• ✨ [TEP-0142] Remote Resolution for StepAction ([TEP-0142] Remote Resolution for StepAction #7321)

  Support Remote Resolution for StepAction

• ✨ TEP-0142: Introduce Params and Results into StepActions CRD (TEP-0142: Introduce Params and Results into StepActions CRD #7317)

  Introduces params and results into the StepAction CRD.

• ✨ Add credentials to HTTP resolver (Add credentials to HTTP resolver #7315)

  The http resolver supports passing username and password for fetching URLs with basic credentials

• ✨ [TEP-0144] Add enum API field ([TEP-0144] Add enum API field #7289)

  Add Enum API field

• ✨ TEP-0142: Introduce StepAction referencing syntax in Steps (TEP-0142: Introduce StepAction referencing syntax in Steps #7284)

  Introduces referencing syntax for StepAction in Steps

• ✨ [TEP-0144] Add feature flag and doc placeholder ([TEP-0144] Add feature flag and doc placeholder #7279)

  Add enable-param-enum feature flag to gate the use of Param.Enum API field

• ✨ TEP-0142: Referencing StepActions in Steps (TEP-0142: Referencing StepActions in Steps #7271)

  Enables referencing of StepActions in Steps if the feature flag "enable-step-actions: true" is set.

• ✨ Add a simple HTTP resolver (Add a simple HTTP resolver #7250)

  A new HTTP resolver is now available, it will let you resolve a http(s) URL to fetch a task or pipeline from.

• ✨ Let the user pass a secret via a parameter for SCM API operations when using the git API resolver (Let the user pass a secret via a parameter for SCM API operations when using the git API resolver #7239)

  User are now able to pass a secret referencing token (or a tokenKey) for a SCM operation on the git resolver instead of using the global one from the configmap.

• ✨ [TEP-0142] Support default resolver for Ref to remote StepAction ([TEP-0142] Support default resolver for Ref to remote StepAction #7345)

• ✨ TEP-0142: Add syntax for providing params to StepActions (TEP-0142: Add syntax for providing params to StepActions #7334)

• ✨ [TEP-0142] Add ResolverRef to Ref ([TEP-0142] Add ResolverRef to Ref #7322)

Fixes

• 🐛 change bundle resolver to use secret instead of service account (change bundle resolver to use secret instead of service account #7331)

  action required: Bundle resolve uses secret to pull bundle Tasks/Pipelines from private registry instead of Service Account. Please update your bundle resolver ref to use secret.

• 🐛 fix: the pr may lose finallyStartTime when pipeline controller is not synchronized to all current state (fix: the pr may lose finallyStartTime when pipeline controller is not synchronized to all current state #7186)

  Reset the finallyStartTime field when one or more final tasks have been created and the current finallyStartTime is empty.

• 🐛 fix: panic may occur when calculating the final task timeout waiting time (fix: panic may occur when calculating the final task timeout waiting time #7188)

Misc

• 🔨 Cleanup v1beta1 reference in pipelinerun reconciler (Cleanup v1beta1 reference in pipelinerun reconciler #7395)
• 🔨 fix: move getFeatureFlagsBaseOnAPIFlag from custom_task_test to another file (fix: move getFeatureFlagsBaseOnAPIFlag from custom_task_test to another file #7393)
• 🔨 chore: pkg import only once (chore: pkg import only once #7348)
• 🔨 [TEP-0142] Refactor extractStepActions ([TEP-0142] Refactor extractStepActions #7328)
• 🔨 Fix capitalization inconsistency in reconciler (Fix capitalization inconsistency in reconciler #7318)
• 🔨 remove GetUnsignedTask helper function and use var in each file (remove GetUnsignedTask helper function and use var in each file #6799)
• 🔨 Bump k8s.io/client-go from 0.27.7 to 0.27.8 in /test/custom-task-ctrls/wait-task-beta (Bump k8s.io/client-go from 0.27.7 to 0.27.8 in /test/custom-task-ctrls/wait-task-beta #7377)
• 🔨 Bump github.com/tektoncd/pipeline from 0.53.0 to 0.53.1 in /test/custom-task-ctrls/wait-task-beta (Bump github.com/tektoncd/pipeline from 0.53.0 to 0.53.1 in /test/custom-task-ctrls/wait-task-beta #7368)
• 🔨 Use a maintained action for "changed files" (Use a maintained action for "changed files" #7364)
• 🔨 Replace ubi9/ubi-minimal with busybox image (Replace ubi9/ubi-minimal with busybox image #7363)
• 🔨 Add direnv support with boilerplate (Add direnv support with boilerplate #7344)
• 🔨 Bump github.com/spiffe/spire-api-sdk from 1.8.1 to 1.8.4 (Bump github.com/spiffe/spire-api-sdk from 1.8.1 to 1.8.4 #7343)
• 🔨 Bump github.com/jenkins-x/go-scm from 1.14.14 to 1.14.20 (Bump github.com/jenkins-x/go-scm from 1.14.14 to 1.14.20 #7339)
• 🔨 Bump github.com/sigstore/sigstore from 1.7.4 to 1.7.5 (Bump github.com/sigstore/sigstore from 1.7.4 to 1.7.5 #7311)
• 🔨 Bump github.com/tektoncd/pipeline from 0.52.1 to 0.53.0 in /test/custom-task-ctrls/wait-task-beta (Bump github.com/tektoncd/pipeline from 0.52.1 to 0.53.0 in /test/custom-task-ctrls/wait-task-beta #7305)
• 🔨 Bump github.com/containerd/containerd from 1.7.7 to 1.7.8 (Bump github.com/containerd/containerd from 1.7.7 to 1.7.8 #7303)
• 🔨 removed repeated word how-to-write-a-resolver.md (removed repeated word how-to-write-a-resolver.md #7302)
• 🔨 Fix git resolver example (Fix git resolver example #7299)
• 🔨 Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.7.4 to 1.7.5 (Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.7.4 to 1.7.5 #7288)
• 🔨 Bump github.com/golangci/golangci-lint from 1.54.2 to 1.55.1 in /tools (Bump github.com/golangci/golangci-lint from 1.54.2 to 1.55.1 in /tools #7283)
• 🔨 Bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 (Bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 #7281)
• 🔨 Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 #7280)
• 🔨 Bump github.com/google/cel-go from 0.12.6 to 0.18.1 (Bump github.com/google/cel-go from 0.12.6 to 0.18.1 #7253)
• 🔨 Update ko to go 1.20 in release task (Update ko to go 1.20 in release task #7341)
• 🔨 Disable HTTP/2 by updating knative/pkg (Disable HTTP/2 by updating knative/pkg #7324)

Docs

• 📖 Improve migration documentation (Improve migration documentation #7389)
• 📖 docs: update upper limit for layers in a bundle (docs: update upper limit for layers in a bundle #7355)
• 📖 fixed issue where is release-pipeline-nightly.yaml? #7282 changed broken link from release-pipeline-nightly.yaml to release-pipeline.yaml (fixed issue #7282 changed broken link from release-pipeline-nightly.yaml to release-pipeline.yaml #7306)
• 📖 Update release with v0.53.0 LTS (Update release with v0.53.0 LTS #7301)

Thanks

Thanks to these contributors who contributed to v0.54.0!

• ❤️ @Dhruval7878
• ❤️ @Exar04
• ❤️ @JeromeJu
• ❤️ @QuanZhang-William
• ❤️ @Yongxuanzhang
• ❤️ @afrittoli
• ❤️ @chitrangpatel
• ❤️ @chmouel
• ❤️ @cugykw
• ❤️ @dependabot[bot]
• ❤️ @khrm
• ❤️ @mlschmithorst
• ❤️ @pratap0007
• ❤️ @testwill
• ❤️ @vdemeester
• ❤️ @vivekBoii

Extra shout-out for awesome release notes:

• 😍 @QuanZhang-William
• 😍 @Yongxuanzhang
• 😍 @chitrangpatel
• 😍 @chmouel
• 😍 @cugykw
• 😍 @khrm

---

This discussion was created from the release Tekton Pipeline release v0.54.0 "Korat Bender".