github tektoncd/pipeline v0.51.0
Tekton Pipeline release v0.51.0 "Havana Brown Demerzel"
on GitHub

latest releases: v0.61.0, v0.53.7, v0.56.5...
10 months ago

🎉 Co-schedule option and bugfixes 🎉

-Docs @ v0.51.0
-Examples @ v0.51.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.51.0/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77af0123195ea84840480151ea9735ca9e2f869d262e403dad6fa6c42c32bc04193

Obtain the attestation: 

REKOR_UUID=24296fb24b8ad77af0123195ea84840480151ea9735ca9e2f869d262e403dad6fa6c42c32bc04193
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file: 

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.51.0/release.yaml
REKOR_UUID=24296fb24b8ad77af0123195ea84840480151ea9735ca9e2f869d262e403dad6fa6c42c32bc04193

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.51.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Upgrade Notices

With this release, the minimun Kubernetes version supported is now 1.25.

Changes

Features

  • ✨ [TEP-0135] Coschedule per (Isolated) PipelineRun e2e support (#6927)

[TEP-0135]: Support coschedule: pipelineruns and coschedule: isolate-pipelinerun coschedule modes.
Users can now opt in this new feature to schedule all the pods in the same node and to optionally enforce one running pipelinerun in a node at the same time.

  • ✨ Add service for Resolvers - metrics, probes and tracing (#6973)

Deprecation Notices

  • 🚨 Mark disable-affinity-assistant as deprecated (#6991)

The disable-affinity-assistant feature flag is deprecated in favour of the new coschedule feature flag. The disable-affinity-assistant feature flag will be removed in 9 months.

Fixes

  • 🐛 Fix release pipeline (publish-to-bucket) (#7044)

Binary file (standard input) matches

  • 🐛 Make sure we use the correct namespace for remote Pipeline validation (#7017)

ix validation errors when using the cluster resolver

  • 🐛 Create a separate role for Events Controller (#7016)

The role for Events Controller is now tekton-events-controller, and the Rolebinding is now tekton-pipelines-events-controller.

  • 🐛 fix: add taskRunTemplate field validation (#6983)

Validate forbidden envs in TaskRunTemplate.PodTemplate.

  • 🐛 Fail fast on invalid image (#6982)

The Pod reason InvalidImageName is treated now as a permanent issue, so that TaskRuns that include a step with an invalid image reference are failed immediately and the corresponding Pod is deleted.

  • 🐛 Sync checksum between trusted resources and cluster resolver (#6964)

Cluster resolver now computes the checksum of the pre-processed Tekton object instead of just the spec.

  • 🐛 Fix Taskrun Failure for Preempted Pod of Taskrun (#6962)

This fixes the Taskrun failure for Preempted Pod of Taskrun which uses PVC.

  • 🐛 fix: refine error resean with invalid pipelinename in taskrunspecs (#6957)

When the taskRunSpecs of the pipelineRun contains an invalid pipeline task name, the cause of the InvalidTaskRunSpecs error is displayed.

  • 🐛 Fix enforce-nonfalsifiability feature flag in configmap (#6937)

Misc

  • 🔨 Mark disable-affinity-assistant as deprecated (#6991)

action required: The disable-affinity-assistant feature flag is deprecated in favour of the new coschedule feature flag. The disable-affinity-assistant feature flag will be removed in 9 months.
The Affinity Assistant behaviour should now be configured by the coschedule feature flag.

  • 🔨 Bump knative/pkg to 1.11 (#6975)

Bump knative.dev/pkg to 1.11 so the Kubernetes min version is now 1.25

  • 🔨 Add webhook validation for remote Tasks (#6942)

Remote tasks are now validated by any validating admission webhooks.

  • 🔨 [TEP-0135] Refactor CreatePVCsForWorkspaces (#6921)
  • 🔨 Bump github.com/golangci/golangci-lint from 1.54.1 to 1.54.2 in /tools (#7057)
  • 🔨 Bump github.com/golangci/golangci-lint from 1.54.0 to 1.54.1 in /tools (#7047)
  • 🔨 Bump github.com/golangci/golangci-lint from 1.53.3 to 1.54.0 in /tools (#7039)
  • 🔨 Bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2 (#7031)
  • 🔨 Bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 (#7026)
  • 🔨 Bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1 (#7021)
  • 🔨 Bump go.uber.org/zap from 1.24.0 to 1.25.0 (#7018)
  • 🔨 Bump github.com/containerd/containerd from 1.6.19 to 1.7.3 (#7002)
  • 🔨 Bump github.com/spiffe/spire-api-sdk from 1.7.0 to 1.7.1 (#6997)
  • 🔨 Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.8.1 (#6980)
  • 🔨 Add E2E Testing for Matrix (#6944)

Docs

  • 📖 docs: Update references to examples from v1beta1 to v1 (#7050)
  • 📖 Fix typos and formatting in TaskRuns doc (#7020)
  • 📖 Update Matrix Documentation for Results (#7012)
  • 📖 [TEP-0135] Improve workspace related documentation (#6994)
  • 📖 Remove warnings about matrix being non-functional (#6986)
  • 📖 Add v0.50 to releases.md (#6967)
  • 📖 [TEP-0135] Update Affinity Assistant documentation (#6892)

Thanks

Thanks to these contributors who contributed to v0.51.0!

Extra shout-out for awesome release notes:

Check out latest releases or
releases around tektoncd/pipeline v0.51.0

Don't miss a new pipeline release

NewReleases is sending notifications on new releases.

Get notifications