Skip to content

Sigstore not working properly with transparency.enabled: manual #1117

Open
@renzodavid9

Description

Expected Behavior

With Pipeline version >= 0.49.0, and transparency.enabled: "manual" configured in Chains, when submitting a TaskRun/PipelineRun that has the chains.tekton.dev/transparency-upload: "true" annotation, Chains should upload the generated data to Rekor and populate the chains.tekton.dev/transparency annotation with the URL where the info is.

Actual Behavior

The chains.tekton.dev/transparency annotation is not added to the TaskRun/PipelineRun.

Steps to Reproduce the Problem

  1. Install a Pipeline version >= v0.49.0 (e.g, kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.55.0/release.yaml)
  2. Install Chains, and configure the feature flag transparency.enabled to manual
  3. Apply the following TaskRun:
apiVersion: tekton.dev/v1
kind: TaskRun
metadata:
  annotations:
    chains.tekton.dev/transparency-upload: "true"
  name: image-task
spec:
  taskSpec:
    steps:
    - image: busybox
      name: "step1"
      script: |
        echo Hello test
  1. After it completes, inspect it, you won't find the chains.tekton.dev/transparency annotation with the URL

Additional Info

  • Kubernetes version: any
  • Tekton Pipeline version: >= v0.49.0

This issue is blocking the upgrade of the Tekton Pipeline version used for the e2e tests.

Related issue in Pipelines: tektoncd/pipeline#7291

Metadata

Assignees

No one assigned

    Labels

    kind/bugCategorizes issue or PR as related to a bug.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions