Tekton Triggers release v0.23.0 "Tekton Triggers"

[khrm]

-Docs @ v0.23.0
-Examples @ v0.23.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.23.0/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.23.0/interceptors.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a11b8a3dc45583f50a2166834931fa90e92b29af49e99c54e95972c81c27a5e56

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a11b8a3dc45583f50a2166834931fa90e92b29af49e99c54e95972c81c27a5e56
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.23.0/release.yaml
INTERCEPTORS_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.23.0/interceptors.yaml
REKOR_UUID=24296fb24b8ad77a11b8a3dc45583f50a2166834931fa90e92b29af49e99c54e95972c81c27a5e56

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.23.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml
curl "$INTERCEPTORS_FILE" >> release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• ✨ Github Interceptor to support Owners File Validation (Github Interceptor to support Owners File Validation #1516)

Github interceptor blocks a pull request trigger from being executed unless invoked by an owner or with a configurable comment by an owner, for example /ok_to_test. This feature can be enabled/disabled by feature flagging it true/false

• ✨ Add support for v1 pipeline types and customruns (Add support for v1 pipeline types and customruns #1514)

Triggers now allows creating v1 PipelineRuns, TaskRuns, Tasks, and Pipelines as well as v1beta1 CustomRuns

• ✨ add changed files to the github interceptor (add changed files to the github interceptor #1507)

The GitHub Interceptor now has the ability to add a comma delimited list of all files that have changed (added, modified or deleted) for the push and pull_request events. The list of changed files are added to the changed_files property of the event payload in the top-level extensions field

Fixes

• 🐛 Change TLS MinVersion to in order to make Triggers run on OCP where FIPS enabled (Change TLS MinVersion to tls.VersionTLS12 in order to make Triggers run on OCP where FIPS enabled #1518)

Changed TLS MinVersion to tls.VersionTLS12 in order to make Triggers run on OCP(Where FIPS enabled) as OCP uses MInTLS as 1.2 for all components

• 🐛 Add SecurityContext to Eventlistener containers (Add SecurityContext to Eventlistener containers #1494)

Eventlistener containers now contain the right security context to allow running with restricted pod security admission

• 🐛 Skip webhook validation on delete for v1beta1 (Skip webhook validation on delete for v1beta1 #1470)

Resource validation is skipped on deletion

• 🐛 Remove the GO111MODULE=off in release pipeline (Remove the GO111MODULE=off in release pipeline #1536)
• 🐛 Fix the error message during InterceptorExecution (Fix the error message during InterceptorExecution #1523)

Misc

• 🔨 Add v0.22.2 to releases.md (Add v0.22.2 to releases.md #1532)

• 🔨 chore: use http constants to replace numbers (chore: use http constants to replace numbers #1531)

• 🔨 Add v0.22.x to releases.md (Add v0.22.x to releases.md #1511)

• 🔨 test: use T.Setenv to set env vars in tests (test: use T.Setenv to set env vars in tests #1491)

• 🔨 Update ko image to latest with Go 1.19 (Update ko image to latest with Go 1.19 #1541)

• 🔨 Fix go1.19 related codegen issues (Fix go1.19 related codegen issues #1534)

• 🔨 Remove git files from KODATA (Remove git files from KODATA #1533)

• 🔨 Update Pipelines to v0.44 and cel-go to v0.13.0 (Update Pipelines to v0.44 and cel-go to v0.13.0 #1525)

Docs

Thanks

Thanks to these contributors who contributed to v0.23.0!

• ❤️ @Juneezee
• ❤️ @dependabot[bot]
• ❤️ @dibyom
• ❤️ @kcloutie
• ❤️ @khrm
• ❤️ @lbernick
• ❤️ @my-git9
• ❤️ @nagasree9
• ❤️ @savitaashture

Extra shout-out for awesome release notes:

• 😍 @dependabot[bot]
• 😍 @dibyom
• 😍 @kcloutie
• 😍 @lbernick
• 😍 @my-git9
• 😍 @nagasree9
• 😍 @savitaashture

---

This discussion was created from the release Tekton Triggers release v0.23.0 "Tekton Triggers".