This Dashboard LTS release supports Pipelines v0.53.x LTS, and v0.56.x LTS, as well as Triggers v0.24.x LTS, and v0.25.x.
Attestation
The Rekor UUID for this release is 24296fb24b8ad77a095cf37815542fd2091234a701df065717fa4d6609d9c6b5fd42e00014277702
Verify that all container images in the release file are in the attestation:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.43.1/release.yaml
REKOR_UUID=24296fb24b8ad77a095cf37815542fd2091234a701df065717fa4d6609d9c6b5fd42e00014277702
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.43.1@sha256:" + .digest.sha256')
# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml
# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
echo " ===> ok"
else
echo " ===> no match"
fi
Fixes
- 🐛 Fix for Create PipelineRun specifying ServiceAccount with v1 API #3291
Thanks
Thanks to these contributors who contributed to v0.43.1!
- ❤️ @AlanGreene