-Docs @ v0.19.1
-Examples @ v0.19.1
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.19.1/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.19.1/interceptors.yaml
Attestation
The Rekor UUID for this release is 57daf527a9c1bedeaee94d36dea93aa9a68ae005025587079a2968c468ce0be0
Obtain the attestation:
REKOR_UUID=57daf527a9c1bedeaee94d36dea93aa9a68ae005025587079a2968c468ce0be0
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | base64 --decode | jq
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.19.1/release.yaml
INTERCEPTORS_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.19.1/interceptors.yaml
REKOR_UUID=57daf527a9c1bedeaee94d36dea93aa9a68ae005025587079a2968c468ce0be0
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | base64 --decode | jq -r '.subject[]|.name + ":v0.19.1@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
curl "$INTERCEPTORS_FILE" >> release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
There are no code changes in this release.
Tekton Triggers release v0.19.1 is identical to v0.19.0, but rebuilt with go v1.17.8.
Docs
Thanks
Thanks to these contributors who contributed to v0.19.1!
- ❤️ @khrm
Extra shout-out for awesome release notes:
- 😍 @khrm