Tekton Pipeline release v0.33.0 "Highlander HAL"

[afrittoli]

🎉 🪟 More Windows features 🪟, lots of fixes 🔨 and docs improvements 📖 ! 🎉

-Docs @ v0.33.0
-Examples @ v0.33.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.33.0/release.yaml

Attestation

The Rekor UUID for this release is 5d258716457107c85cf59b80c0091c333463eb7c2a9f2d6f5b642ca69ef2671f

Obtain the attestation:

REKOR_UUID=5d258716457107c85cf59b80c0091c333463eb7c2a9f2d6f5b642ca69ef2671f
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | base64 --decode | jq

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.33.0/release.yaml 
REKOR_UUID=5d258716457107c85cf59b80c0091c333463eb7c2a9f2d6f5b642ca69ef2671f

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | base64 --decode | jq -r '.subject[]|.name + ":v0.33.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do 
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Deprecation Notices

The scope-when-expressions-to-task flag will be removed in the next release.
We recommend migrating Pipelines to using when expressions scoped to the guarded Task only.

Upgrade Notices

The configuration flags disable-working-dir-overwrite and disable-home-env-overwrite and associated features are not available anymore. Users that rely on automatic workingDir and HOME overwrite must update their Tasks to explicitly them before updating to
this release.

The when expressions in a given Task are scoped to guard the Task only by default. Users that rely the Branch scope can use the scope-when-expressions-to-task to continue guarding the Task and its dependent Tasks.

Changes

Features

• ✨ [TEP-0059] Scope expressions to only (TEP-0059: Scope when expressions to Task only #4580)

The when expressions in a given Task are scoped to guard the Task only by default. Set scope-when-expressions-to-task to continue guarding the Task and its dependent Tasks. The scope-when-expressions-to-task flag will be removed soon so we recommend migrating Pipelines to using when expressions scoped to the guarded Task only.

• ✨ Add Step and Sidecar Overrides to TaskRun API (Add Step and Sidecar Overrides to TaskRun API #4575)

[Feature] Adds API fields for Step and Sidecar Overrides to TaskRun. This feature is not yet implemented.

• ✨ Add resolution types to the API (Add resolution types to the API #4502)

Syntax support for remote resolution, an alpha feature in development, has been added to pipelineRef and taskRef fields. Using the remote resolution fields is not yet possible, however, and will only result in errors.

• ✨ Support workingDir init on Windows (Support workingDir init on Windows #4475)

Working dir initialization is now done using a Go binary in a new container image included in the release, which makes it portable to run on Windows nodes.

• ✨ Include Windows builds of cmd/nop in release process (Include Windows builds of cmd/nop in release process #4474)

Include Windows support for the nop image, to enable Affinity Assistant for Windows, and more.

Backwards incompatible changes

In current release:

• 🚨 Remove deprecated flags home-env and working-dir 🧹 (Remove deprecated flags home-env and working-dir 🧹 #4587)

The configuration flags disable-working-dir-overwrite and disable-home-env-overwrite, after defaulting
to True for nine months (i.e. feature disabled), have now been removed completely, along with the associated
features which are not available in Tekton anymore.

Fixes

• 🐛 Fix for some arm64 machines. (Fix for some arm64 machines. #4588)

Fix problems on some arm64 machines.

• 🐛 Consider osversion when determining platform uniqueness (Consider osversion when determining platform uniqueness #4569)

Tweaks platform-specific command selection logic to handle images that provide multiple images for the same os+architecture, differing only by osversion (e.g., golang:1.17)

• 🐛 Ignore variant when looking up command for platform in entrypoint (Ignore variant when looking up command for platform in entrypoint #4550)

Loosen runtime platform selection logic to account for platforms with CPU variants

• 🐛 Add validation for PR infinite timeouts (Add validation for PR infinite timeouts #4539)

[Bug Fix] Add validation for 0 timeout for pipelinerun.timeouts.tasks and pipelinerun.timeouts.finally

• 🐛 Set correct timeout for PR tasks with elapsed time (Set correct timeout for PR tasks with elapsed time #4532)

[Bug Fix] Account for elapsed time, pipeline.timeouts.tasks, and pipeline.tasks[].timeout when setting taskrun timeout

• 🐛 Account for PipelineRun elapsed time for timeouts (Account for PipelineRun elapsed time for timeouts #4506)

[Bug fix]: Respect pipelinerun.timeouts.tasks for sequential TaskRuns or TaskRun retries

• 🐛 Fix Pipeline/Task to *Run label/annotation propagation 🥨 (Fix Pipeline/Task to *Run label/annotation propagation 🥨 #4478)

Fix labels and annotation propagation from Task/Pipeline to TaskRun/PipelineRun and thus the generated Pod

• 🐛 Use pr.Timeouts.Pipeline in Custom Task reconcile (Use pr.Timeouts.Pipeline in Custom Task reconcile #4440)

[Bug fix]: Use pipeline.spec.timeouts.pipeline to determine pipeline timeout during custom task reconcile

• 🐛 Patch temp GOPATH hack script to handle nounset option (Patch temp GOPATH hack script to handle nounset option #4574)
• 🐛 Add taskSpec resources validation (Add taskSpec resources validation #4547)
• 🐛 add default seccomp profile (add default seccomp profile #4520)
• 🐛 Update hack scripts to shim temp GOPATH as needed (Update hack scripts to shim temp GOPATH as needed #4465)
• 🐛 Fix incorrect format specifier in test files (Fix incorrect format specifier in test files #4495)
• 🐛 Fix tekton_pipelines_controller_taskrun_count recount bug (Fix tekton_pipelines_controller_taskrun_count recount bug #4469)

Misc

• 🔨 Remove deprecated flags home-env and working-dir 🧹 (Remove deprecated flags home-env and working-dir 🧹 #4587)

The configuration flags disable-working-dir-overwrite and disable-home-env-overwrite, after defaulting
to True for nine months (i.e. feature disabled), have now been removed completely, along with the associated
features which are not available in Tekton anymore.

• 🔨 Update write_test.go (Update write_test.go #4570)
• 🔨 [refactor] Remove ImplicitParamEnabled context. ([refactor] Remove ImplicitParamEnabled context. #4528)
• 🔨 Update k8schain (Update k8schain #4488)

Drops dependency on k8s cred providers, statically link GCR/ECR/ACR cred helpers' Go code instead

• 🔨 and supported in (Timeout and TaskSpec supported in Custom Tasks #4481)
• 🔨 Revert 49a7fa to remove fake AWS creds (Revert 49a7fa to remove fake AWS creds #4504)

The pipelines controller config previously included AWS environment variables as a workaround for a performance-related issue. The underlying issue appears to be fixed and so the environment variables have been removed from the controller.

• 🔨 use helper functions - MarkResource* (use helper functions - MarkResource* #4565)
• 🔨 cleanup - ApplyContext parameters (cleanup - ApplyContext parameters #4564)
• 🔨 minor cleanup - use MarkResource* instead of updating the status explicitly (minor cleanup - use MarkResource* instead of updating the status explicitly #4561)
• 🔨 Add copyright notice to clock.go (Add copyright notice to clock.go #4505)
• 🔨 Move to Go 1.16 (Move to Go 1.16 #4497)
• 🔨 Drop minishift instructions (Drop minishift instructions #4489)
• 🔨 Provide testing implementation of time.Now() (Provide testing implementation of time.Now() #4487)
• 🔨 Update the release notes to describe kustomize usage (Update the release notes to describe kustomize usage #4509)
• 🔨 Separate buildPlatforms and publishPlatforms (Separate buildPlatforms and publishPlatforms #4486)
• 🔨 Bump knative.dev/pkg vendoring. Use klog/v2 (Bump knative.dev/pkg vendoring. Use klog/v2 #4538)
• 🔨 Increase lease time of controller and webhook (Increase lease time of controller and webhook #4541)
• 🔨 Use podTemplate ImagePullSecrets for Entrypoint Image Lookup (Use podTemplate ImagePullSecrets for Entrypoint Image Lookup #4496)
• 🔨 Drop resource requests: from gohelloworld. (Drop resource requests: from gohelloworld. #4549)

Docs

• 📖 Update the feature flag docs (TEP-0059: Update the scope-when-expressions-to-task feature flag docs #4584)
• 📖 Add bash v4+ requirement to the development guide (Add bash v4+ requirement to the development guide #4498)
• 📖 Move kind development instructions to top of dev cluster instructions. (Move kind development instructions to top of dev cluster instructions. #4466)
• 📖 Update the deprecations table (Update the deprecations table #4586)
• 📖 debug is an alpha feature (debug is an alpha feature #4573)
• 📖 Fix links to Why Aren't PipelineResources in Beta? (Fix links to Why Aren't PipelineResources in Beta? #4572)
• 📖 Fix kustomize invocation typo (Fix kustomize invocation typo #4537)
• 📖 Add doc links for Pipelines 0.28.3 (Add doc links for Pipelines 0.28.3 #4536)
• 📖 Add doc links for 0.29.1, 0.30.1, 0.31.1 and 0.32.1 (Add doc links for 0.29.1, 0.30.1, 0.31.1 and 0.32.1 #4530)
• 📖 Update README.md (Update README.md #4507)
• 📖 Add docs links for v0.32.0 (Add docs links for v0.32.0 #4482)
• 📖 Update docs to reflect resource requests of pods (Update docs to reflect resource requests of pods #4472)
• 📖 Update install docs to mention firewall reqs (Update install docs to mention firewall reqs #4517)

Thanks

Thanks to these contributors who contributed to v0.33.0!

• ❤️ @AlanGreene
• ❤️ @MrMYHuang
• ❤️ @R2wenD2
• ❤️ @Yongxuanzhang
• ❤️ @abayer
• ❤️ @afrittoli
• ❤️ @anu-baskar
• ❤️ @concaf
• ❤️ @guillaumerose
• ❤️ @imjasonh
• ❤️ @jerop
• ❤️ @khrm
• ❤️ @lbernick
• ❤️ @mattmoor
• ❤️ @pritidesai
• ❤️ @psychosis448
• ❤️ @sbwsg
• ❤️ @vdemeester
• ❤️ @wlynch

Extra shout-out for awesome release notes:

• 😍 @MrMYHuang
• 😍 @Yongxuanzhang
• 😍 @afrittoli
• 😍 @anu-baskar
• 😍 @guillaumerose
• 😍 @imjasonh
• 😍 @jerop
• 😍 @khrm
• 😍 @lbernick
• 😍 @mattmoor
• 😍 @sbwsg
• 😍 @vdemeester
• 😍 @wlynch

---

This discussion was created from the release Tekton Pipeline release v0.33.0 "Highlander HAL".