tektoncd/pipeline v0.33.2

Tekton Pipeline release v0.33.2 "Highlander HAL"

on GitHub

-Docs @ v0.33.2
-Examples @ v0.33.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.33.2/release.yaml

Attestation

The Rekor UUID for this release is 54dfb92e4adb988fcba9d78f15b73c5a31ce560100f1e72fc6fed0a399c7c611

Obtain the attestation:

REKOR_UUID=54dfb92e4adb988fcba9d78f15b73c5a31ce560100f1e72fc6fed0a399c7c611
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | base64 --decode | jq

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.33.2/release.yaml 
REKOR_UUID=54dfb92e4adb988fcba9d78f15b73c5a31ce560100f1e72fc6fed0a399c7c611

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | base64 --decode | jq -r '.subject[]|.name + ":v0.33.2@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do 
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Deprecation Notices

Same as v0.33.0:

The scope-when-expressions-to-task flag will be removed in the next release.
We recommend migrating Pipelines to using when expressions scoped to the guarded Task only.

Upgrade Notices

Same as v0.33.0:

🚨 Tekton v0.33.2 requires Kubernetes v1.21+ 🚨

The configuration flags disable-working-dir-overwrite and disable-home-env-overwrite and associated features are not available anymore. Users that rely on automatic workingDir and HOME overwrite must update their Tasks to explicitly them before updating to
this release.

The when expressions in a given Task are scoped to guard the Task only by default. Users that rely the Branch scope can use the scope-when-expressions-to-task to continue guarding the Task and its dependent Tasks.

Changes

There a no new commits in v0.33.2 compared to v0.33.1 - the only change is that the release has been rebuilt using golang v1.17.7.

Thanks

Thanks to these contributors who contributed to v0.33.2!

• @afrittoli

Extra shout-out for awesome release notes:

• @afrittoli