🎉 Workspaces in Sidecar is serialized as workspaces not Workspaces 🎉

-Docs @ v0.24.2
-Examples @ v0.24.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.24.2/release.yaml

Upgrade Notices

See upgrade notices for v0.24.0.
Sidecar Workspaces field is annotated in lowercase instead of pascalcase, so Pipelines using them need to be reapplied.

Fixes

• 🐛 [cherry-pick] Fix Workspaces in Sidecar to be serialized as workspaces not Workspaces (#4013)
  Sidecar Workspaces field is annotated in lowercase instead of pascalcase.

• 🐛 [cherry-pick] Update tektoncd/plumbing. (#4009)

• 🐛 Revert Fix issue with 23 in Script blocks (#3942)
  Revert fix for instances of "$$" in script blocks. Kubernetes replaces "$$" with a single "$" and your scripts need to deal appropriately with these instances.

Thanks

Thanks to these contributors who contributed to v0.24.2!

• ❤️ @afrittoli
• ❤️ @jerop
• ❤️ @jeffmaury
• ❤️ @wlynch

Extra shout-out for awesome release notes:

• 😍 @afrittoli
• 😍 @jerop

🎉 Restore behaviour for $$ embedded in a script 🎉

-Docs @ v0.24.1
-Examples @ v0.24.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.24.1/release.yaml

Upgrade Notices

See upgrade notices for v0.24.0.
Nothing new in v0.24.1.

Changes

Fixes

Misc

• 🔨 Revert Fix issue with 37 in Script blocks (#3938)

Revert fix for instances of "$$" in script blocks. Kubernetes replaces "$$" with a single "$" and your scripts need to deal appropriately with these instances.

Docs

• 📖 Add links to v0.24.0 docs and examples (#3933)

Thanks

Thanks to these contributors who contributed to v0.24.1!

• ❤️ @afrittoli
• ❤️ @sbwsg

Extra shout-out for awesome release notes:

• 😍 @sbwsg

🎉 Feature Flags, Workspaces in Steps and Sidecars, Better Defaults for Steps and more! 🎉

-Docs @ v0.24.0
-Examples @ v0.24.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.24.0/release.yaml

Upgrade Notices

• Release v0.24.0 of Tekton requires Kubernetes v1.18+.
• The default value of disable-home-env-overwrite and disable-working-dir-overwrite has been changed to true. See the e-mail thread and the pull request for more details.

Changes

Features

• ✨ Allow dot character in resource names (#3893)

Allow resource names to contain the dot character (".")
Resource names now validated using the common validation.IsDNS1123Subdomain() function

• ✨ Feat: Adding hostAliases in PodTemplate spec. (#3889)

Feat: Add hostAliases in PodTemplate spec which provides Pod-level override of hostname resolution by modifing /etc/hosts.

• ✨ Implement TEP-0033: Add enable-api-fields feature-flag (#3881)

A new feature-flag, "enable-api-fields" has been added. Valid values are "alpha" and "stable". It defaults to "stable".

Setting the "enable-api-fields" flag tells Tekton what level of API stability you require in the cluster. As new features are added to Pipelines we'll first place those features under the "alpha" flag. When the feature is ready we'll promote it to "stable". This process is described in TEP-0033[1].

Opting in to "alpha" gives you early exposure to exciting new features as they're added to Pipelines but those features are still undergoing development and could be subject to backwards-incompatible changes.

[1] https://github.com/tektoncd/community/blob/main/teps/0033-tekton-feature-gates.md

• ✨ Disable the default workingDir and HOME overrides (#3878)

Steps no longer receive a default HOME env var of "/tekton/home", nor a default workingDir of "/workspace".

action required: if you rely on these defaults you now have a choice to make: either update your Task steps to include the workingDir and HOME env or set the "disable-home-env-overwrite" and "disable-working-directory-overwrite" feature flags to "false". We plan to continue supporting these flags for another 9 months following the release of 0.24 and then they too will be removed.

• ✨ an aggregate status of tasks in finally (#3817)

Introducing a variable $(tasks.status) to access aggregate execution status of tasks in finally.

• ✨ Add Step and Sidecar Workspaces feature (#3700)

New alpha feature added: "Step and Sidecar Workspaces":
- Requires "enable-api-fields: alpha" feature gate.
- Sidecars in a Task now receive Workspaces, just like Steps do.
- Steps and Sidecars can now specify which Workspaces they want access to. This isolates the workspace to only those Steps or Sidecars that need them, allowing Task authors to limit exposure of sensitive data like credentials.
- The default behaviour for workspaces in Steps remains the same - all Steps get access to them.

• ✨ Make entrypoint binary build for Windows (#3876)

Deprecation Notices

• 🚨 The disable-home-env-overwrite and disable-working-dir-overwrite are now deprecated (#3878)

The default value of these flags has been changed to true. The flags are still available so that the old behaviour can still be configured; the flags are now deprecated and will be removed in 9 months from now. e-mail thread

Fixes

• 🐛 validate the context variable in when expressions (#3899)

Do not allow when expressions in dag to specify the context variable accessing the execution status of any other task - $(tasks.<pipelineTask>.status)

• 🐛 Fix issue with "$$" in Script blocks (#3888)

Fix a bug where the literal characters "$$" in a Step's script block would be replaced with a single "$".

• 🐛 Skip sidecar deletion logic for canceled or timed-out TaskRun (#3877)

Do not run sidecar deletion logic for canceled or timed-out taskrun where pod was deleted

• 🐛 Bump distroless/base:debug image (#3890)

Misc

• 🔨 Remove cluster-wide namespace list/watch permissions (#3880)

The controller SA no longer requests cluster-wide permission to list and watch namespaces.

• 🔨 Use v1 API for RoleBinding 🦝 (#3872)

Using rbac.authorization.k8s.io/v1 instead of rbac.authorization.k8s.io/v1beta1 for RoleBinding as it is being deprecated starting in 1.17.

• 🔨 Add alpha feature gate tests (integration & examples) to our CI (#3917)

Pipelines now e2e tests every commit against both the "stable" and "alpha" feature gates.

• 🔨 Test multiple scripts in one task executing with different UIDs (#3914)

Added test for running Scripts with differing securityContexts in the same Task.

• 🔨 Add a nodeAffinity rule to the controller and webhook deployments (#3909)

Controller and Webhook pods will no longer be scheduled on Windows nodes if any exist in a Kubernetes cluster.

• 🔨 Enable Bundles and Custom Tasks when feature gate is set to alpha (#3908)

Switching the "enable-api-fields" feature gate to "alpha" also turns on Tekton Bundles and Custom Tasks support, since these are alpha features.

• 🔨 Bump knative to 0.22 🧙 (#3883)

Update knative dependency to 0.22, and default minimum kubernetes version supported, v1.18.0

• 🔨 Updates the Tekton Bundle spec and resolver to be more explicit. (#3869)
• 🔨 Fix lint issues (#3926)
• 🔨 Remove field name from error returned during feature gate validation (#3918)
• 🔨 Remove random suffixes on creds-init volumes (#3907)
• 🔨 Add test YAML helpers (#3905)
• 🔨 Last minute fixups from review feedback on "enable-api-fields" PR (#3904)
• 🔨 Resolving integration test failures by bumping plumbing (#3894)
• 🔨 Add doc links for 0.23.0 to README and update release-cheat-sheet (#3868)

Docs

• 📖 adding clear explanation of the context variables 🤞 (#3919)
• 📖 Update auth.md (#3882)

Thanks

Thanks to these contributors who contributed to v0.24.0!

• ❤️ @SaschaSchwarze0
• ❤️ @Siddhesh-Ghadi
• ❤️ @afrittoli
• ❤️ @aiden-deloryn
• ❤️ @imjasonh
• ❤️ @jmcshane
• ❤️ @joellord
• ❤️ @pierretasci
• ❤️ @pritidesai
• ❤️ @psschwei
• ❤️ @sbwsg
• ❤️ @vdemeester
• ❤️ @xclud

Extra shout-out for awesome release notes:

• 😍 @SaschaSchwarze0
• 😍 @aiden-deloryn
• 😍 @imjasonh
• 😍 @pritidesai
• 😍 @psschwei
• 😍 @sbwsg
• 😍 @vdemeester
• 😍 @xclud

To Be Done: Deprecation Notices, Backward Incompatible Changes

🎉 Spring Cleaning Edition: reduce controller permissions, remove unused Image CRD, add non-root user to git-init and pullrequest-init 🎉

-Docs @ v0.23.0
-Examples @ v0.23.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.23.0/release.yaml

Upgrade Notices

None in this release.

Changes

Features

• ✨ Remove YAML merge and variable from config YAML (#3842)

Make release.yaml more easily consumed by tools like kustomize and ytt

Deprecation Notices

None in this release.

Backwards incompatible changes

None in this release.

Fixes

• 🐛 PVC: Use Owner UIDs instead of Owner names. (#3856)

Misc

• 🔨 Use v1 instead of v1beta1 for 🤖 (#3859)

Using rbac.authorization.k8s.io/v1 instead of rbac.authorization.k8s.io/v1beta1 for ClusterRoleBinding as it is being deprecated starting in 1.17.

• 🔨 Further limit cluster-wide read-write permissions (#3832)

Remove cluster-wide write access to ConfigMaps, LimitRanges and remove all cluster-wide access to Deployments

• 🔨 Remove cluster-wide write access to ServiceAccounts and Secrets (#3831)

Remove cluster-wide write access to ServiceAccounts and Secrets

• 🔨 Remove unused image-cache CRD (#3850)

The Image CRD in the caching.internal.knative.dev group is not used by Tekton and is not included anymore in the release.

• 🔨 Change to use new base images for git and pullrequest images (#3828)

Add nonroot user in the PullRequest init base image

• 🔨 Add Dockerfile for pullrequest nonroot build base image (#3810)

Add Dockerfile for pullrequset nonroot build base image

• 🔨 Pull request template spring cleaning 🌷 (#3866)
• 🔨 refactor pipelineTask validation (#3848)
• 🔨 refactoring validate pipelineTask name (#3818)
• 🔨 Add ability to run e2e tests on top of nightly release (#3847)
• 🔨 Use "no-cache" in the buildkit based builds (#3834)
• 🔨 Update self, community and plumbing reference to use main… 🧙 (#3821)

Docs

• 📖 Correct url in migration doc and modify to main branch in doc urls (#3860)

Correct the links in migration doc and modify url to use main branch

• 📖 Remove mention of absolute vs relative path from workspaces doc (#3852)

Removed incorrect doc that stated workspaces with relative mountPath would be mounted relative to /workspace

• 📖 add the latest release - 0.22.0 (#3826)
• 📖 updating release cheat sheet (#3825)
• 📖 Fix the pipeline release cheat-sheet (#3823)

Thanks

Thanks to these contributors who contributed to v0.23.0!

• ❤️ @ImJasonH
• ❤️ @afrittoli
• ❤️ @barthy1
• ❤️ @bobcatfish
• ❤️ @pritidesai
• ❤️ @sbwsg
• ❤️ @vdemeester
• ❤️ @wlynch
• ❤️ @zhangtbj

Extra shout-out for awesome release notes:

• 😍 @ImJasonH
• 😍 @afrittoli
• 😍 @sbwsg
• 😍 @vdemeester
• 😍 @wlynch
• 😍 @zhangtbj

🎉 Stop API conversion spam and Disable webhook PodDisruptionBudget🎉

-Docs @ v0.22.0
-Examples @ v0.22.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.22.0/release.yaml

Features

N/A

Deprecation Notices

N/A

Backwards incompatible changes

N/A

Fixes

• 🐛 Serialize and deserialize Finally in PipelineRuns too (#3816)

Fix issue where PipelineRun with finally in nested pipeline spec would lose those finally tasks when converted down to v1alpha1 and back up to v1beta1 again.

• 🐛 Change to avoid error when service account has empty secret name (#3795)

In case of an empty secret name, the taskRun was failing with CouldntGetTask as the GET request with an empty secret name return an error saying resource name may not be empty. Fixing such failing of a taskRun by avoiding an empty secret name in the kubeclient GET request.

• 🐛 Disable Webhook PDB by default, document enabling it (#3787)

Disable PodDisruptionBudget for the webhook deployment by default

• 🐛 Set minAvailable:1 to unblock node upgrades (#3784)

Modify webhook PodDisruptionBudget minAvailable to 1, so node upgrades aren't blocked

• 🐛 Losslessly roundtrip Pipelines with Finally from beta to alpha and back (#3779)

v1beta1 Pipelines can now be requested with v1alpha1 version without losing Finally tasks. Applying the returned v1alpha1 version will store the resource as v1beta1 with the Finally section restored to its original state.

• 🐛 Short term fix for Cloud Event Source (#3761)

Resolves #2676 by providing Cloud Event source value when selfLink unset

• 🐛 Fix nightly builds (again) (#3776)
• 🐛 Fix the cr URL for crane (#3775)
• 🐛 Fix the pipeline nightly (#3772)
• 🐛 Pin golang to avoid breakages. (#3766)

Misc

• 🔨 Remove Test Builders from pipelinerunstate_test.go (#3802)

• 🔨 Remove Test Builders from remote_tests.go (#3801)

• 🔨 Remove support for build-gcs and the gcs-fetcher image (#3771)

Remove support for build-gcs and the gcs-fetcher image

• 🔨 Remove tekton.dev/task label from taskrun of clustertasks (#3764)

Remove tekton.dev/task label from taskrun of clustertasks

• 🔨 Closes #3262: Modify unnecessarily exported methods to unexported (#3289)

• 🔨 Add PipelineRun and TaskRun Status work to the Roadmap (#3793)

• 🔨 Refine the comment for git init base image (#3791)

• 🔨 cleaning up the function parameter (#3808)

• 🔨 Cleanup s390x exclude test list with build-gcs tests (#3783)

• 🔨 Re-enable test now that HEAD is fixed (#3768)

• 🔨 Update roadmap for 2021! 🛣️ (#3789)

• 🔨 Rework the release pipeline to use workspaces (#3788)

• 🔨 Use legacy build and test golang tasks (#3780)

• 🔨 Move the secret mount to the correct step (#3777)

• 🔨 Adding power (ppc64le) architecture image mappings (#3630)

Docs

• 📖 Fix typo in Code Blocks (#3814)

• 📖 Add v0.21.0 to the README (#3765)

• 📖 Add the missing imagePullSecret configuration guidance for a developer (#3699)

• 📖 Add documenation about setting resource limits on a Task step (#3809)

• 📖 Update docs to use Kubernetes 1.17 as the minimum version (#3805)

• 📖 Fix a broken link to the service account docs (#3773)

Thanks

Thanks to these contributors who contributed to v0.22.0!

• ❤️ @DanArlowski
• ❤️ @ImJasonH
• ❤️ @afrittoli
• ❤️ @bahetiamit
• ❤️ @barthy1
• ❤️ @bobcatfish
• ❤️ @cqbqdd11519
• ❤️ @jerop
• ❤️ @jmcshane
• ❤️ @kobayashi
• ❤️ @kscherer
• ❤️ @mattmoor
• ❤️ @piyush-garg
• ❤️ @popcor255
• ❤️ @pritidesai
• ❤️ @sbwsg
• ❤️ @wlynch
• ❤️ @xiujuan95
• ❤️ @zhangtbj

Extra shout-out for awesome release notes:

• 😍 @DanArlowski
• 😍 @ImJasonH
• 😍 @cqbqdd11519
• 😍 @jerop
• 😍 @jmcshane
• 😍 @kobayashi
• 😍 @piyush-garg
• 😍 @popcor255
• 😍 @sbwsg
• 😍 @xiujuan95
• 😍 @zhangtbj

🎉 WhenExpressions and Results in Finally Tasks 🎉

-Docs @ v0.21.0
-Examples @ v0.21.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.21.0/release.yaml

Upgrade Notices

• Requires Kubernetes 1.17+ to run
• The controller now requires that the SYSTEM_NAMESPACE environment variable is set. This was set by default before, but is now required.

Features

• ✨ WhenExpressions in Finally Tasks (#3738)

  WhenExpressions are supported in Finally Tasks not only to provide efficient guarded execution but also to improve the
  reusability of Tasks in Finally

• ✨ Allow pipeline results to use custom task results (#3694)

  Pipeline results now can refer to pipeline tasks that run custom tasks and produce results.

• ✨ Support multiple secrets of type dockercfg and dockerconfigjson (#3659)

  Adds support for multiple secrets of type dockercfg or dockerconfigjson

• ✨ add sparse checkout to git (#3646)

• ✨ Implement Pending PipelineRun status (TEP-0015) (#3522)

  Added PipelineRunPending setting to PipelineRun Spec Status to allow creating PipelineRuns in a Pending state.

• ✨ consuming task results in finally (#3242)

  Final tasks can be configured to consume results of PipelineTasks from tasks section.

Deprecation Notices

N/A

Backwards incompatible changes

N/A

Fixes

• 🐛 Make volume mount names RFC1123 DNS label strict (#3740)

  Fixed a bug where a secret name with dots (e.g. gcr.io) led to a TaskRun creation failure, because the secret name was used internally as part of a volume mount name. These volume mount name have the be RFC1123 DNS label conform and therefore disallow dots as part of the name.

• 🐛 Validate Context Variables in Finally Tasks (#3733)

  Added validation for Context variables in Finally Tasks

• 🐛 Change to use the FilteredPodInformer to only watch Tekton relevant pods (#3725)

  Performance improvement: Only watch Pods managed by Tekton, instead of all Pods on the cluster

• 🐛 Fix duplicate Pods when TaskRun or Pod labels are changed (#3708)

  Fix duplicate Pods when TaskRun or Pod labels are changed

• 🐛 Fix stuck PipelineRun caused by optional workspace (#3702)

  Fixed bug where PipelineRun that didn't provide an optional workspace to the Pipeline would stall until timing out.

• 🐛 taskrun: fix log message (#3689)

• 🐛 Fix bug where step status ordering did not match step container ordering (#3679)

  Fixed bug where sorted order of step statuses did not match order of step containers.

• 🐛 set task as failed (#3571)

  Declare task failure when it hits CreateContainerConfigError instead of setting it to unknown i.e. running.

• 🐛 Move resolution of Pipeline Results to end of completed/successful reconcile (#3684)

Misc

• 🔨 Use crane cp to move images, instead of gcloud (#3755)

  Release: Copy and re-tag images using crane, instead of gcloud

• 🔨 Update TOC in Pipelines documentation (#3743)

• 🔨 Refactor IsFinallySkipped Tests (#3729)

• 🔨 Document deprecation of the build-gcs PipelineResource type (#3728)

  Deprecate the build-gcs sub-type of the storage PipelineResource

• 🔨 bump deps - k8s to 1.19.7 (#3724)

• 🔨 Issue #3553 reduce unit test execution time (#3652)

• 🔨 Remove pkg/system. (#3177)

  The controller now requires that the SYSTEM_NAMESPACE environment variable is set. This was set by default before, but is now required.

• 🔨 tekton controller logger key (#3752)

  The controller logger key is now set to "tekton-pipelines-controller" instead of "tekton" which is consistent with the webhook service name "tekton-pipelines-webhook".

• 🔨 promoting webhook service name in the logger (#3741)

  Promoting webhook service name in the logger instead of always defaulting to "webhook-pipeline". The service name is read from the env. variable WEBHOOK_SERVICE_NAME if specified else defaults to "tekton-pipelines-webhook"

• 🔨 Add nonroot user to pipeline's build-base image (#3727)

  Added non-root user 65532 to pipelines' build-base image. Git-init can now be used to clone repositories as a non-root user.

• 🔨 release: publish only on a given list of platforms 💻 (#3717)

  Publish images for a finite list of architecture instead of all the one supported by base images. The current list is : linux/amd64 (supported) and linux/arm64, linux/s390x, linux/ppc64le.

• 🔨 Validate dependencies between resolved resources in a PipelineRun (#3711)

  Added extra validations before PipelineRun can start: all result variables in the Pipeline must be valid and optional workspaces from a pipeline can only be passed to tasks expecting optional workspaces.

• 🔨 Fix replace go mod of client-go (#3668)

• 🔨 Use main branch for community repository 🧙 (#3747)

• 🔨 bump ggcr & k8schain module versions (#3736)

• 🔨 Add kustomize.yaml to the Tekton folder (#3754)

• 🔨 Small updates for s390x tests (#3714)

• 🔨 Ignore generated openapi code when running golangci-lint (#3685)

• 🔨 adding unit tests for pipelineTaskList.Deps (#3597)

• 🔨 Fix TestPipelineLevelFinally_OneDAGTaskFailed test to avoid false negative error (#3722)

• 🔨 Skip the dropNetworking test if it doesn't have the correct privileges. (#3653)

Docs

• 📖 Correct workspace doc on behaviour of mountPath (#3719)

  Fixed doc issue: relative workspace mountPaths are not prepended with "/workspace/" and never have been.

• 📖 Fix typo in auth.md (#3709)

• 📖 Update taskruns.md doc (#3696)

  Fix wrong path in the taskruns.md document.

• 📖 Fix the broken link of pipeline previous yaml file (#3671)

• 📖 updating doc - pipelineResult referencing results of a finally task (#3753)

• 📖 Add docs about cloud events structure (#3735)

• 📖 Add comment to PipelineRunSpecStatusPending (#3723)

• 📖 updating readme with 0.20.1 (#3698)

• 📖 Add link to docs and exmples for v0.20.0 (#3686)

Thanks

Thanks to these contributors who contributed to v0.21.0!

• ❤️ @GregDritschler
• ❤️ @HeavyWombat
• ❤️ @ImJasonH
• ❤️ @LinuxSuRen
• ❤️ @SaschaSchwarze0
• ❤️ @Tomy2e
• ❤️ @a-rothwell
• ❤️ @afrittoli
• ❤️ @barthy1
• ❤️ @dlorenc
• ❤️ @dprotaso
• ❤️ @howardjohn
• ❤️ @jbarrick-mesosphere
• ❤️ @jerop
• ❤️ @pritidesai
• ❤️ @qu1queee
• ❤️ @sbwsg
• ❤️ @souleb
• ❤️ @vdemeester
• ❤️ @zhangtbj
• ❤️ @zhouhaibing089

Extra shout-out for awesome release notes:

• 😍 @GregDritschler
• 😍 @HeavyWombat
• 😍 @ImJasonH
• 😍 @LinuxSuRen
• 😍 @SaschaSchwarze0
• 😍 @Tomy2e
• 😍 @a-rothwell
• 😍 @dlorenc
• 😍 @dprotaso
• 😍 @howardjohn
• 😍 @jbarrick-mesosphere
• 😍 @jerop
• 😍 @pritidesai
• 😍 @qu1queee
• 😍 @sbwsg
• 😍 @souleb
• 😍 @vdemeester
• 😍 @zhangtbj
• 😍 @zhouhaibing089

🎉 fix task result validation with "status" 🎉

-Docs @ v0.20.1
-Examples @ v0.20.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.20.1/release.yaml

Changes

Fixes

• 🔨 [cherry-pick] validate execution status variable (#3697)

Avoid validating task results while validating context variable to access execution status since it follows similar pattern $(tasks.taskname.results.status) where status is result of some task compared to context variable for referencing execution status $(tasks.taskname.status).

Thanks

Thanks for the bug report @r0bj 😻 !!

Thanks for the review @sbwsg, @vdemeester, @GregDritschler, @souleb, @afrittoli !!!

Thanks to these contributors who contributed to v0.20.1!

• ❤️ @pritidesai

Extra shout-out for awesome release notes:

• 😍 @pritidesai

🎉 Improved custom tasks, task status variable 🎉

-Docs @ v0.20.0
-Examples @ v0.20.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.20.0/release.yaml

Upgrade Notices

Tekton v0.20.0 requires Kubernetes 1.17+ to run.

Changes

Features

• ✨ Allow custom tasks to use workspaces, service accounts, pod templates (#3660)

Allow custom tasks to use workspaces, service accounts, and pod templates

• ✨ access execution status of any task in finally (#3390)

Introducing a variable $(tasks..status) to access execution status of any non finally pipelineTask in finally.

Fixes

• 🐛 Change leader-election RBAC to be namespaced (#3639)

The tekton-pipelines-webhook-leaderelection and tekton-pipelines-controller-leaderelection ClusterRoleBindings have been changed to RoleBindings, and the tekton-pipelines-leader-election ClusterRole has been changed to a Role.

• 🐛 Fix broken link in doc (#3634)
• 🐛 Fix bug where PipelineRun emits task results that were never produced (#3472)

Fix bug where PipelineRun emits task results that were never produced. Previously a Pipeline Result that contained an invalid variable would be added to the PipelineRun with that unreplaced variable intact. Now a Pipeline Result that contains an invalid variable will not be emitted by the PipelineRun at all.

• 🐛 Fix the publish task (#3683)

Misc

• 🔨 Remove creds-init image from build and deploy (#3665)

The creds-init helper image is no longer part of Pipelines' build. The image has not been in use for several releases.

• 🔨 Remove v1beta1 from possible AdmissionReview versions (#3640)

• 🔨 Tekton Pipelines Topical Ownership (#3662)

• 🔨 Revert "Revert "Add a "dropNetworking" function and unit tests to the… (#3616)

• 🔨 Revert "Add a "dropNetworking" function and unit tests to the runner package (#3613)

• 🔨 Add a "dropNetworking" function and unit tests to the runner package. (#3582)

• 🔨 build: run ko resolve on build presubmit 🙃 (#3621)

Run ko resolve during PR to ensure we are catching any multi-arch problem early

• 🔨 Bump knative to release-0.20 (#3605)

Updating knative.dev/pkg to release-0.20. This bumps the minimum supported version of kuberenetes to 0.17

• 🔨 Add a "set -e" to the dind-sidecar test script. (#3629)
• 🔨 Update go-containerregistry from v0.1.3 to v0.2.1. (#3628)
• 🔨 Remove creds-init image from release/nightly pipelines (#3674)
• 🔨 examples/tests: fix yq task (#3658)
• 🔨 Add Jerop as an owner 🎉 (#3620)
• 🔨 Run controller and webhook also as non-root group. Drop capabilities. (#3611)
• 🔨 Fix integration test failures in dind. (#3632)

Docs

• 📖 Update docs on termination message size to correctly reflect k8s info (#3680)

Fixed error in developer doc on the maximum size of the termination message.

• 📖 fix typo in a parameter of the v1beta1 example (#3642)
• 📖 Improve documentation around variable behaviour and gotchas (#3636)

Add a doc describing how to safely use variables in script blocks of tasks without eval'ing their contents

• 📖 Add SYSTEM_NAMESPACE introduction in test README (#3633)
• 📖 Add v0.19.0 to the README (#3615)
• 📖 Updates to the HA document (#3599)

Update enabling-ha.md document, to highlight the usage of buckets for the HA solution in the pipeline controller.

• 📖 Fix missing "s" in pod template docs (#3622)
• 📖 Add some more release process details 🤓 (#3614)

Thanks

Thanks to these contributors who contributed to v0.20.0!

• ❤️ @GregDritschler
• ❤️ @afrittoli
• ❤️ @benhxy
• ❤️ @bioball
• ❤️ @bobcatfish
• ❤️ @dlorenc
• ❤️ @jerop
• ❤️ @pritidesai
• ❤️ @qu1queee
• ❤️ @sbwsg
• ❤️ @theofpa
• ❤️ @vdemeester
• ❤️ @vincent-pli
• ❤️ @zhangtbj

Extra shout-out for awesome release notes:

• 😍 @GregDritschler
• 😍 @bioball
• 😍 @jerop
• 😍 @pritidesai
• 😍 @qu1queee
• 😍 @sbwsg
• 😍 @theofpa
• 😍 @vdemeester
• 😍 @vincent-pli
• 😍 @zhangtbj

Unsorted PR List

To Be Done: Deprecation Notices, Backward Incompatible Changes

🎉 Custom Tasks 🎉

-Docs @ v0.19.0
-Examples @ v0.19.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.19.0/release.yaml

Upgrade Notices

N/A

Features

• ✨ Do not allow use of deprecated Conditions with custom tasks (#3601)

  Disallow use of Conditions in pipeline tasks that reference custom tasks

• ✨ Plumb the TEKTON_RESOURCE_NAME env var into the cluster and PR reso… (#3555)

  Binary file (standard input) matches

• ✨ Plumb the TEKTON_RESOURCE_NAME environment variable into more resou… (#3532)

  Binary file (standard input) matches

• ✨ Add variable expansion for ImagePullPolicy in Tasks. See #3423 (#3488)

  Add variable expansion in Tasks for fields:

  • spec.steps[].imagePullPolicy
  • spec.sidecar[].imagePullPolicy

• ✨ Integrate custom tasks into Pipelines (#3463)

  In package pkg/apis/pipeline/v1alpha1, the type of field RunStatusFields.Results has changed from
  v1beta1.TaskRunResult to v1alpha1.RunResult.

• ✨ Add an unsuccessful TaskRun testcase in conformance tests (#3454)

Deprecation Notices

• 🚨 The PascalCase fields in WhenExpressions is deprecated

  Tasks and Pipelines with WhenExpressions that were created using Tekton Pipelines v0.16.x need to be reapplied to fix the case of their json annotations (#3570)

Backwards incompatible changes

N/A

Fixes

• 🐛 Fix PipelineRun serviceAccountNames for finally tasks (#3560)

  Fixes a bug where PipelineRun's serviceAccountNames and taskPodSpecs couldn't be applied on finally tasks and resulted in an error.

• 🐛 Fix duplicate TaskRuns when Pipeline/PipelineRun labels are changed (#3558)

  Fix an issue where the PipelineRun controller could create duplicate TaskRuns if a Pipeline's or PipelineRun's labels are changed while the PipelineRun is running

• 🐛 Consider not-found pod as permanent error when taskrun is done (#3542)

  Fix an issue where the taskrun controller would continue reconciling completed taskruns if pods in case of evicted pods

• 🐛 optimize cycle detection logic in dag (#3539)

• 🐛 Fix script step on CRI-O runtime (#3526)

Misc

• 🔨 Do not set the gitconfig option globally (#3574)

• 🔨 fix commen typo (#3546)

• 🔨 deleting redundant test file (#3556)

• 🔨 Use logstream in the duplicate_test (#3530)

• 🔨 pkg/apis: rename {Task,Pipeline}Interface into *Object (#3589)

• 🔨 retrieving deps outside of dag.build (#3583)

• 🔨 pkg/apis: remove duplicate substitution code. (#3579)

• 🔨 pkg/apis: unexport ApplyContainerReplacements (#3578)

• 🔨 pkg/apis: use pod.Template instead of v1beta1.PodTemplate (#3577)

• 🔨 tracker: use TrackReference instead of deprecated Track function (#3576)

• 🔨 pkg/apis: refactor GetTaskRunSpecs function (#3575)

• 🔨 pkg/apis: remove duplicate MergeStepsWithStepTemplate function (#3572)

• 🔨 Make examples runnable with kubectl 🐇 (#3564)

• 🔨 Refresh list of s390x excluded test (#3527)

• 🔨 Add some tests for pkg/git/git.go (#3523)

• 🔨 Use dogfooding skopeo image for e2e and examples tests (#3519)

• 🔨 Use dogfooding buildx image for multi-arch builds (#3514)

• 🔨 pkg/apis tests cleanup on duplicate test name 💅 (#3495)

• 🔨 Update plumbing dep to update google/go-licenses (#3422)

Docs

• 📖 Add disable-creds-init property for feature-flags setting (#3573)

• 📖 Add deprecated PascalCase fields in WhenExpressions to deprecated table (#3570)

  action required: Tasks and Pipelines with WhenExpressions that were created using Tekton Pipelines v0.16.x need to be reapplied to fix the case of their json annotations

• 📖 Fix the internal document link typo in docs/auth.md (#3567)

• 📖 Clarify input and output pipeline resource usage with PVC (#3535)

  Added more detail to the documentation about input/output PipelineResources.

• 📖 Update docs when with version info (#3528)

• 📖 Fix markdown styling (#3520)

• 📖 Add a document to tell users how to configure Thread, QPS and Burst (#3508)

• 📖 Correct the disabled link (#3507)

• 📖 fixing broken links (#3562)

• 📖 Format workspaces description and correct unclear words (#3547)

• 📖 fix link to owners file in release readme (#3538)

• 📖 updating readme for 0.18.1 (#3537)

• 📖 Move the High Availability doc out of the developers subdirectory (#3536)

• 📖 updating readme with 0.18 (#3511)

Thanks

Thanks to these contributors who contributed to v0.19.0!

• ❤️ @GregDritschler
• ❤️ @ImJasonH
• ❤️ @NissesSenap
• ❤️ @afrittoli
• ❤️ @barthy1
• ❤️ @chmouel
• ❤️ @dlorenc
• ❤️ @donglinjy
• ❤️ @izhukov
• ❤️ @jerop
• ❤️ @linzhaoming
• ❤️ @ljupchokotev
• ❤️ @mattmoor
• ❤️ @popcor255
• ❤️ @pritidesai
• ❤️ @rinckm
• ❤️ @sbwsg
• ❤️ @vdemeester
• ❤️ @vincent-pli
• ❤️ @xiujuan95
• ❤️ @yaoxiaoqi
• ❤️ @zhangtbj

Extra shout-out for awesome release notes:

• 😍 @GregDritschler
• 😍 @NissesSenap
• 😍 @afrittoli
• 😍 @chmouel
• 😍 @dlorenc
• 😍 @donglinjy
• 😍 @jerop
• 😍 @linzhaoming
• 😍 @ljupchokotev
• 😍 @popcor255
• 😍 @rinckm
• 😍 @vincent-pli
• 😍 @xiujuan95
• 😍 @zhangtbj

🎉 fix larger pipelines (>40 tasks) and updated the webhook name 🎉

-Docs @ v0.18.1
-Examples @ v0.18.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.18.1/release.yaml

Changes

Fixes

• 🐛 [cherry-pick] Fix recursion issue on Skip (#3534)

Fix and issue in the pipeline state resolution which lead to very long or failed start times and high controller CPU in case of pipelines with a large number of dependencies between tasks (40+).

• 🐛 [cherry-pick] Change the webhook name to pipeline-webhook (#3533)

Fix an issue that caused the webhook, under certain conditions, to fail to acquire a lease and not function correctly as a result.

Thanks

Thanks for the bug report @skaegi, @mattmoor, and @afrittoli 😻 !!

Thanks to these contributors who contributed to v0.18.1!

• ❤️ @afrittoli
• ❤️ @sbwsg
• ❤️ @mattmoor
• ❤️ @pritidesai

Extra shout-out for awesome release notes:

• 😍 @afrittoli
• 😍 @sbwsg
• 😍 @mattmoor
• 😍 @pritidesai

🎉 Bundles behind feature-flags and Multi Arch Support (amd, arm, Z, and P) 🎉

-Docs @ v0.18.0
-Examples @ v0.18.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.18.0/release.yaml

Upgrade Notices

N/A

Changes

Features

• ✨ Add readiness and liveness probes in controller (#3489)

• ✨ Init conformance test (#3400)

Initialize the conformance test

• ✨ Add timestaps in logs (#3392)

Add timestamp in the logs of the tekton pipelines controller and webhook

• ✨ Replicate webhook pods for resiliency (#3391)

Add HorizontalPodAutoscaler, PodDisruptionBudget and podAntiAffinity to webhook

• ✨ Add feature flag to disable creds-init (#3379)

Tekton's built-in credential mechanism can now be disabled by setting the disable-creds-init feature-flag to "true".

• ✨ Fixes #3086 - amd64 images are pulled on all the architectures (#3337)

The entrypoint lookup will pull the image for the controller's architecture instead of amd64 to better support different architectures

• ✨ Update -shell-image to a multi-arch version (#3334)

Use a multi-arch shell-image

• ✨ When Expressions Status (#3333)

Resolved When Expressions are listed in the Skipped Tasks and the Task Runs sections of the Status

• ✨ update submodules with --init flag (#3321)

Git-init can now clone recursive submodules.

• ✨ Upgrade knative -> 0.18 (#3319)

This release will drop the resource_name label from webhook_request_(count, latencies_bucket) metrics. This this breaking change with no replacement for those relying on these metrics. The omission of these metrics will improve the overall memory usage of the webhook and the stability of the /metrics endpoint.

• ✨ perf: create (pipeline|task)run timeout checks in background (#3302)

controller and startup time is improved when lots of namespaces are being managed

• ✨ Introduces Tekton bundles: take 2 (#3142)

Task and Pipeline refs now support remote references via Tekton Bundles. Disabled by default. Enable bundles with feature flag.

• ✨ Step timeout (#3087)

Task authors can now specify a timeout for a Step in the TaskSpec.

• ✨ Generate OpenAPI specification and Swagger file (#3081)

  None

• ✨ Leverage logstream to get better e2e diagnostic logs. (#3388)

• ✨ Add ability to replace image names for examples tests based on arch (#3299)

Deprecation Notices

N/A

Backwards incompatible changes

N/A

Fixes

• 🐛 Adjust PipelineRun's StartTime based on TaskRun state. (#3461)

Fixes a bug where PipelineRun may report as Failed when it really timed out.

• 🐛 Make ConditionCheck container names DNS-safe (#3394)

Fixes a bug where condition validation may fail with long condition names.

• 🐛 Don't fail immediately on missing resources. (#3385)

Add a grace period for resources to appear before failing *Runs

• 🐛 Switch webhook liveness/readiness probes to use http ports (#3349)

• 🐛 Attempt to fix another structured-merge-diff failures. (#3348)

action required: Drop pointers from inline struct when embedding TaskSpec in v1beta1

• 🐛 avoid requeuing taskrun in case of permanent error (#3068)

Do not requeue taskrun if it was rejected with permanent error. This bug was causing the incorrect metrics for tekton_taskrun_count{status="failed"}.

• 🐛 Check that events are at least expected ones (#3375)
• 🐛 Eliminate redundant Pod Get. (#3496)
• 🐛 tests: fix potential races with t.Parallel and loops ➿ (#3493)
• 🐛 Fix error path through test. (#3474)
• 🐛 fix finally e2e test (#3464)
• 🐛 Don't "Follow" when dumping test pod logs. (#3447)
• 🐛 Make t.Parallel() come first (#3425)
• 🐛 release: fix the publish task definition 📑 (#3376)
• 🐛 Update the revision used with kaniko. (#3363)
• 🐛 Pass test ctx to taskrun reconciler instead of background ctx (#3445)

Misc

• 🔨 Refactor Skip (#3501)

• 🔨 Refactor the way timeouts are handled (#3500)

Fixes an issue where TaskRuns and PipelineRuns may not properly timeout.

• 🔨 Use PATCH to update ready annotation (#3494)

Use a PATCH to update pods to start running.

• 🔨 Have the timeout handler decorate log lines with key. (#3479)

Log statements from the timeout handler will now be decorate with the key of the resource they are acting on.

• 🔨 Add v0.17.2 and v0.17.1 links to docs and examples (#3473)
• 🔨 Put Tekton OCI bundles behind a feature flags 🎏 (#3492)

Introduce a feature-flag enable-tekton-oci-bundle to be able to use Tekton Bundle through the pipeline API

• 🔨 Use Webhook v1 APIs (#3486)

Use admissionregistration.k8s.io/v1 instead of admissionregistration.k8s.io/v1beta1 for our admission controllers (webhooks).

• 🔨 Moved spec-gen from cmd to hack directory (#3475)

• 🔨 Update TestPipelineRunWithServiceAccountNameAndTaskRunSpec to use different podtemplate field (#3462)

• 🔨 Make the main releases multi-arch (#3456)

Tekton full releases will be multi-arch as well

• 🔨 Added suport for building multi-arch images (#3451)

• 🔨 distinguish task dependencies: ordering vs resource (#3437)

• 🔨 Update -shell-image to a multi-arch version with s390x addition (#3406)

Use a multi-arch shell-image with amd64, arm64 and s390x support

• 🔨 Instruments more timeout_test with logstream (#3478)
• 🔨 Refactor TestIsSkipped to allow checking multiple tasks (#3471)
• 🔨 remove the parameter is not used in func (#3470)
• 🔨 Use proper platform for ko in examples test (#3453)
• 🔨 Include message on reason-mismatch failures (#3448)
• 🔨 Add logstream to v1alpha1 timeout_test.go (#3426)
• 🔨 Fix typo in resources.md (#3403)
• 🔨 Improve the failure mode of timeout_test. (#3396)
• 🔨 Refresh list of s390x excluded tests (#3372)
• 🔨 Refactor pipelinerun resolution to clarify status (#3360)
• 🔨 refactoring get condition status for pipeline method in pipelinerunstate.go (#3325)
• 🔨 use status helper functions in pod status unit tests (#3141)
• 🔨 Hide changes to go.sum by default from GitHub diffs (#3502)
• 🔨 Fix koparse... again. (#3436)
• 🔨 Fix the regex to match image in koparse (#3434)
• 🔨 tests: Add a PipelineRun ServiceAccounts test 🍊 (#3420)
• 🔨 release: enhance koparse 🙃 (#3413)
• 🔨 Add kind label to pull request template (#3409)
• 🔨 release: fix koparse behavior on finding images 🖌 (#3407)
• 🔨 Fix invalid comment on Task Script 👼 (#3405)
• 🔨 Add Task to build base multi-arch image (#3402)
• 🔨 release-cheat-sheet: remove duplicate image resource (#3343)
• 🔨 README.md: add 0.17.0 links (#3341)

Docs

• 📖 Update roadmap.md url in CONTRIBUTING.md (#3419)

• 📖 Add docs around HA support for the pipeline controller (#3418)

• 📖 Mark failure to copy cred to user home as warning (#3395)

A message related to copying credentials has been more clearly marked as a warning to reduce confusion when it appears in Step logs.

• 📖 adding links for 0.17.3 in README (#3503)
• 📖 Fix link to bundle contract doc (#3477)
• 📖 Document usage of chown on /tekton as another cause of error (#3442)
• 📖 Add documents for conformance tests (#3433)
• 📖 Fix the link to the tekton bundle example (#3432)
• 📖 Update PR template to try and avoid /kind being automatically set (#3414)
• 📖 [Automated] Fix misspellings (#3410)
• 📖 docs: update catalog links in v1beta1 migration doc 📖 (#3300)
• 📖 Consolidating local setup instructions into single document (#3125)

Thanks

Thanks to these contributors who contributed to v0.18.0!

• ❤️ @AverageMarcus
• ❤️ @Bobgy
• ❤️ @ImJasonH
• ❤️ @Peaorl
• ❤️ @adshmh
• ❤️ @afrittoli
• ❤️ @bahetiamit
• ❤️ @barthy1
• ❤️ @bobcatfish
• ❤️ @eddie4941
• ❤️ @ibotty
• ❤️ @jerop
• ❤️ @jinchihe
• ❤️ @jlpettersson
• ❤️ @mattmoor
• ❤️ @pierretasci
• ❤️ @pritidesai
• ❤️ @psschwei
• ❤️ @qu1queee
• ❤️ @raballew
• ❤️ @rokrokss
• ❤️ @savitaashture
• ❤️ @sbwsg
• ❤️ @soulseen
• ❤️ @vdemeester
• ❤️ @yaoxiaoqi
• ❤️ @ywluogg

Extra shout-out for awesome release notes:

• 😍 @AverageMarcus
• 😍 @Bobgy
• 😍 @ImJasonH
• 😍 @Peaorl
• 😍 @afrittoli
• 😍 @bahetiamit
• 😍 @barthy1
• 😍 @eddie4941
• 😍 @ibotty
• 😍 @jerop
• 😍 @jinchihe
• 😍 @jlpettersson
• 😍 @mattmoor
• 😍 @pierretasci
• 😍 @pritidesai
• 😍 @qu1queee
• 😍 @raballew
• 😍 @savitaashture
• 😍 @sbwsg
• 😍 @vdemeester
• 😍 @yaoxiaoqi
• 😍 @ywluogg

Unsorted PR List

• Update bundle tests to use IP of service to avoid cluster domain rules (#3431)

🎉 Bug-fix release 🎉

-Docs @ v0.17.3
-Examples @ v0.17.3

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.17.3/release.yaml

Upgrade Notices

N/A

Changes

Fixes

• 🐛 [cherry-pick] Avoid dangling symlinks in git-init (#3485)

Fixed a bug in git-init that allowed a circular symlink to be created from /root/.ssh to itself if no SSH credentials are present in the service account and the disable-home-env-overwrite flag is set to "true".

• 🐛 [cherry-pick] pkg/git: fix ssh credentials detection 🦀 (#3484)

fix ssh credential wrong detection in git-init

Thanks

Thanks to these contributors who contributed to v0.17.3!

• ❤️ @vdemeester
• ❤️ @sbwsg

Extra shout-out for awesome release notes:

• 😍 @vdemeester
• 😍 @sbwsg

🎉 Bug-fix release 🎉

-Docs @ v0.17.2
-Examples @ v0.17.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.17.2/release.yaml

Upgrade Notices

N/A

Fixes

• 🐛 [cherry-pick] Fix TaskRunSpec overrides when empty 🗜 (#3441)

Fix invalid ServiceAccount or PodTemplate in case of not specified in an existing taskRunSpec.

• 🐛 [cherry-pick] Fix json annotations in WhenExpression (#3421)

pipelines with when expressions created in v0.16.3 can be run

Misc

• 🔨 [release-v0.17.x] tekton: port koparse fix to release-0.17.x (#3455)

Ports fixes for koparse.py script from master to the v0.17.x release branch

Thanks

Thanks to these contributors who contributed to v0.17.2!

• ❤️ @vdemeester
• ❤️ @jerop

Extra shout-out for awesome release notes:

• 😍 @vdemeester
• 😍 @jerop

🎉 Bug-fix release 🎉

-Docs @ v0.17.1
-Examples @ v0.17.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.17.1/release.yaml

Upgrade Notices

N/A

Fixes

• 🐛 [cherry-pick] Fix the logic for the disable-ha flag (#3371)

Default behaviour for leader-election-ha has been restored to "enabled".
The controller flag disable-ha will now disable HA support when set to true.

• 🐛 [cherry-pick] Only send cloud events when condition changes (#3370)

Fixes issue with duplicate cloud events. Cloud events are now sent only if a change in condition happened.

• 🐛 [cherry-pick] Take -version into account in the controller ☕️ (#3369)

Correctly set the release annotation on TaskRun based on the currently running pipeline instance version

• 🐛 [cherry-pick] config: fix runAsUser inconsistency with images 🍨 (#3368)

Fix inconsistent uid for the controller and webhook deployment, resulting in failure of installing tekton pipeline on minikube (and other platforms.)

Thanks

Thanks to these contributors who contributed to v0.17.1!

• ❤️ @vdemeester
• ❤️ @afrittoli

Extra shout-out for awesome release notes:

• 😍 @vdemeester
• 😍 @afrittoli

🎉 Optional workspaces and more startup options 🎉

-Docs @ v0.17.0
-Examples @ v0.17.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.17.0/release.yaml

Upgrade Notices

N/A

Changes

Features

• ✨ Base entrypoint image on distroless (#3286)

Binary file (standard input) matches

• ✨ Provide configuration option to disallow omitting known_hosts (#3283)

Provide configuration option to disallow omitting known_hosts in Git SSH Secret.

• ✨ Introduce Optional Workspaces (#3274)

Introduce optional workspaces: A Task or Pipeline may declare a workspace optional and conditionally change their behaviour based on its presence. A TaskRun or PipelineRun may omit that workspace and thereby modify the Task or Pipeline behaviour.

• ✨ Update CRD definition to use apiextensions v1 (#3236)

Update CRD to use apiextensions.k8s.io/v1 instead of v1beta1

• ✨ Bump knative to enable new features (#3181)

knative is upgraded to a more recent version

• ✨ Make DefaultThreadsPerController, QPS and Burst configurable via flags (#3156)

Allows DefaultThreadsPerController, QPS, and Burst to be configured via flags

• ✨ Fix(git): add warning of the mismatch of git cred and url (#3136)

Fix(git): Tekton's credentials initialization now detects when an SSH credential is used with a non-SSH URL (and vice versa) in Git PipelineResources and will log a warning in Step containers.

• ✨ Add minimal initial API spec document (#3131)

Add initial minimal API specification document

• ✨ Emit an event if overwriting PodTemplate affinity (#2859)

• ✨ Add cloud events to metrics (#2720)

• ✨ Run enhancements (#3313)

• ✨ Introducing InternalTektonResultType as a ResultType (#3138)

Deprecation Notices

N/A

Backwards incompatible changes

N/A

Fixes

• 🐛 Replace variables in Sidecar Script block (#3318)

Fixed issue where script blocks in sidecars didn't have their variables replaced.

• 🐛 Fix issue where workspace volume variable and pod volume conf differ (#3315)

Fixed a bug where a workspace's volume name did not match the value from workspace..volume variables.

• 🐛 Sort pod container statuses based on Step order in taskSpec (#3256)

Steps in the TaskRun status field are now sorted according to the Step order specified in the taskSpec

• 🐛 Fix version label on created pods 👇 (#3193)

Fix version label on created pods

• 🐛 default service account (#3168)

Service account when missing from pipelinerun/taskrun spec and ConfigMap, controller sets it to default in the spec.

• 🐛 Add support for repeated PVC-claim but using subPath in AA-validation (#3099)

Fixes a bug with validation for the Affinity Assistant when the same PVC is used for multiple workspaces but with different subPaths

• 🐛 Fix annotation on v1beta1 field. (#3328)
• 🐛 Fix validation error on parameters 🐒 (#3309)
• 🐛 Use the test context in Reconcile tests (#3285)
• 🐛 Accept CloudEvents in any order for CE reconcile test (#3292)
• 🐛 Log cloud events to help debug issue 2992 (#3282)
• 🐛 Refactor cancellation test (#3266)

Misc

• 🔨 Derive cancel patch bytes once at controller startup (#3316)

Fail more loudly at controller startup when we fail to marshal the JSON Patch request to cancel TaskRuns owned by cancelled PipelineRuns.

• 🔨 Remove test builders from validate_params_test.go (#3281)

• 🔨 Replace google/cloud-sdk with GCR equivalent. (#3280)

gcloud images now use GCR hosted equivalent instead of DockerHub.

• 🔨 Enhance v1beta1 validation code for pipelinerun 🍸 (#3279)

Binary file (standard input) matches

• 🔨 Enhance v1beta1 validation code for pipeline 🍸 (#3277)

Binary file (standard input) matches

• 🔨 Enhance v1beta1 validation code for taskrun 🍸 (#3270)

Binary file (standard input) matches

• 🔨 Enhance v1beta1 validation code for clustertask 🍸 (#3268)

Binary file (standard input) matches

• 🔨 Omit cleaning up the Affinity Assistant if disabled (#3214)

• 🔨 Enhance v1beta1 validation code for task 🍸 (#3185)

Binary file (standard input) matches

• 🔨 tekton: migrate release task and pipeline to v1beta1 (#3106)

Release pipeline and tasks are now using the v1beta1 API

• 🔨 refactoring pipelinerunstate - no logic changed at all (#3326)
• 🔨 Add missing json annotations (#3291)
• 🔨 test: remove extra logs in task_validation_test.go (#3290)
• 🔨 Include golang version in docs. (#3272)
• 🔨 Remove unused test builder methods (#3261)
• 🔨 Remove test builders from pipelinerun cancel_test.go (#3260)
• 🔨 Remove test builders from apply_test.go (#3259)
• 🔨 refactoring PipelineRunState to simplify logic for retrieving next tasks (#3254)
• 🔨 Remove test builders from v1alpha1/pipeline_validation_test.go (#3250)
• 🔨 Clean up metrics_test.go (#3247)
• 🔨 Apply replacements in tasks and finally tasks separately (#3244)
• 🔨 pkg/*: remove more v1alpha1 reference. (#3233)
• 🔨 refactoring - pipelinerunstate (#3231)
• 🔨 Clean up dag_test.go (#3230)
• 🔨 Clean up examples_test.go (#3229)
• 🔨 Remove test builder references from test/**/adoc.go (#3228)
• 🔨 pkg/{termination,pod,reconciler}: use v1beta1 struct 🍶 (#3222)
• 🔨 Clean up multiarch_utils.go (#3200)
• 🔨 Clean up e2e entrypoint_test.go (#3199)
• 🔨 Clean up e2e Git PipelineResource tests (#3198)
• 🔨 Update e2e cancellation tests (#3195)
• 🔨 Remove tb.ArrayOrString (#3184)
• 🔨 Remove release-note block indentation in PR template 🌮 (#3269)
• 🔨 Change git pipeline tests for s390x (#3265)
• 🔨 Makefile: fix the all target 🎪 (#3191)
• 🔨 TestReconcile_ExplicitDefaultSA flakiness fix 🍂 (#3189)

Docs

• 📖 Fix the pipelinerun docs about completion time (#3332)

Fixed incorrect documentation about pipeline run completion time and status.

• 📖 Add docs demonstrating how to share a Workspace with Sidecars (#3322)

Added an example and documentation showing how to share a Workspace between Steps and Sidecars in a Task.

• 📖 Add a short example of using optional workspaces in when expressions (#3308)

Added a short example of using optional workspaces in when expressions.

• 📖 Fix some typos in docs (#3297)

• 📖 Update variables.md to mention the risk of not escaping your own parameters. (#3296)

• 📖 Update Release Cheet Sheat, remove instructions from README (#3252)

Removed release directions from README in favor of release-cheat-sheet.

• 📖 Move metadata under taskSpec in the documentation (#3246)

• 📖 Rename Artifact Storage to PipelineResource Storage in install doc (#3209)

Clarified storage configuration for PipelineResources in install doc

• 📖 Change Timeout Field (#3157)

• 📖 Add a clarifying comment to new workspace test (#3329)

• 📖 Add a short note documenting the new git ssh secret feature flag (#3294)

• 📖 Improve documetation for entrypoint binary (#3288)

• 📖 Adding link to documentation on supported fields for pod templates. (#3284)

• 📖 Reorganize Developing.md sections (fix for #3263) (#3264)

• 📖 Add 0.16.3 docs link 📝 (#3248)

• 📖 Add docs for v0.16.x 📝 (#3216)

• 📖 Add nop-image to release instructions (#3186)

• 📖 Add results path variable to results docs (#3144)

Thanks

Thanks to these contributors who contributed to v0.17.0!

• ❤️ @AlexReiff
• ❤️ @FogDong
• ❤️ @GregDritschler
• ❤️ @ImJasonH
• ❤️ @Peaorl
• ❤️ @adshmh
• ❤️ @afrittoli
• ❤️ @andreyvelich
• ❤️ @barthy1
• ❤️ @bobcatfish
• ❤️ @jerop
• ❤️ @jlpettersson
• ❤️ @kobayashi
• ❤️ @mattmoor
• ❤️ @pierretasci
• ❤️ @piyush-garg
• ❤️ @popcor255
• ❤️ @pritidesai
• ❤️ @psschwei
• ❤️ @sbwsg
• ❤️ @vdemeester
• ❤️ @wlynch
• ❤️ @yaoxiaoqi

Extra shout-out for awesome release notes:

• 😍 @FogDong
• 😍 @ImJasonH
• 😍 @Peaorl
• 😍 @adshmh
• 😍 @afrittoli
• 😍 @andreyvelich
• 😍 @jlpettersson
• 😍 @kobayashi
• 😍 @pierretasci
• 😍 @popcor255
• 😍 @pritidesai
• 😍 @sbwsg
• 😍 @vdemeester
• 😍 @wlynch
• 😍 @yaoxiaoqi

🎉 Fix nil pointer with timeouts 🎉

-Docs @ v0.16.3
-Examples @ v0.16.3

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.16.3/release.yaml

Changes

Fixes

• 🐛 Fix nil pointer exception in case the PipelineRun timeout is not specified (nor default applied)⏲ (#3241)

Thanks

Thanks for the bug report @dghubble 😻 !!

Thanks to these contributors who contributed to v0.16.3!

• ❤️ @vdemeester

🎉 Fix When Expressions and Affinity Assistant event !!!🎉

-Docs @ v0.16.2
-Examples @ v0.16.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.16.2/release.yaml

Upgrade Notices

When expressions will now work when combined with other more complicated DAG features!

Fixes

When expression fixes for #3196 #3203 and #3188:

• 🐛 Fix to honor When expressions in presence of finally tasks. When expression parameters were not getting resolved in presence of finally tasks and were causing check to skip always return false. Applied fix to when expression parameters resolution function to make sure parameters are substituted with its respective values.
• 🐛 Fix pipelinerun to apply task results to the leaf nodes of DAG before checking if its time to run finally tasks so that when expressions have resolved task results before the check.
• 🐛 Fix pipelinerun to detect and terminate by only evaluating when expressions when all its parents are visited/done instead of evaluating in advance.
• 🐛 Tasks with WhenExpressions using variable replacements were not executed when the WhenExpressions evaluate to false

Fix for #3205:

• 🐛 Omit potential NotFound events when cleaning up the Affinity Assistant

Thanks

Thanks for the quick bug reports!!

• 😻 @VeereshAradhya
• 😻 @r0bj
• 😻 @abudavis

Thanks to these contributors who contributed to v0.16.2!

• ❤️ @pritidesai
• ❤️ @jerop
• ❤️ @jlpettersson

🎉 Fix Cloud Events connection leak! 🎉

Note: be on the lookout for v0.16.2 which will include critical fixes to when expressions.

-Docs @ v0.16.1
-Examples @ v0.16.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.16.1/release.yaml

Fixes

• 🐛 This release fixes an issue with the cloud event delivery that lead to an increasingly high number of open (idle) connections towards the configured target URL. The fix is achieved by disabling keep-alive, which means that - at least for now - we will be setting up a new connection for every cloud event. This is the current behaviour too, only now old connections will be closed immediately. (#3201, #3215)

Thanks

Thanks to these contributors who contributed to v0.16.1!

• ❤️ @afrittoli
• ❤️ @sbwsg

🎉 When expressions and webhook probes! 🎉

-Docs @ v0.16.0
-Examples @ v0.16.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.16.0/release.yaml

Upgrade Notices

• 📣 The tekton-pipelines-controller and tekton-pipelines-controller are now configured to run as a non-root user. (#2967)

Features

• ✨ Liveness and readiness probes are available for webhook. (#3162)
• ✨ To run a Task only when certain criteria are met, it is now possible to guard task execution using
  the when field, which allows you to list a series of references to WhenExpressions that contain
  an Input, an Operator and Values. The valid Operators are in and notin. The WhenExpressions are ANDed. (#3135)
• ✨ Update step statuses on TaskRun in event of cancellation or timeout (#3088)
• ✨ fix(substition): fix configmap and secret volume param substition (#3071)
• ✨ User can access the uid of the PipelineRun that a Pipeline is running in using context.pipelineRun.uid, User can access the uid of the TaskRun that a Task is running in using context.taskRun.uid, All context variables that are supported so far are now validated. (#3017)
• ✨ Adding support for git-lfs repositories in git-init by adding the package in the git-init image (#3006)
• ✨ The TaskRun.Status.ResourcesResult field now contains a URL for Git and Image PipelineResources, containing the URL of the resource data. (#2975)
• ✨ Pipeline authors can now specify metadata while embedding tasks (using taskSpec) into their pipeline. (#2826)

Deprecation Notices

• 🚨 Conditions CRD deprecated, use WhenExpressions instead. (#3135)
• 🚨 PipelineRun.Spec.ServiceAccountNames is being deprecated in favor of PipelineRun.Spec.TaskRunSpec[].ServiceAccountName (#3028)

Backwards incompatible changes

None!

Fixes

• 🐛 Fixes a bug with validation for the Affinity Assistant when the same PVC is used for multiple workspaces but with different subPaths (#3099)
• 🐛 Fix an issue where PipelineRuns would pass validation even when a workspace binding was missing required volume info. (#3096)
• 🐛 When a TaskRun or PipelineRun completes, the go routine waiting for it to timeout will now stop (as it was designed to do!) instead of always re-reconciling (#3078)
• 🐛 The tekton-pipelines-controller and tekton-pipelines-controller are now configured to run as a non-root user. To match these reduced requirements, the tekton-pipelines PodSecurityPolicy updates its runAsUser rule to use MustRunAsNonRoot and is further tightened-up to only allow "use" in the tekton-pipelines namespace. (#2967)
• 🐛 Use ko:// in e2e tests to exercise current code 🙃 (#2902)

Misc

• 🔨 PipelineRun.Spec.ServiceAccountNames is being deprecated in favor of PipelineRun.Spec.TaskRunSpec[].ServiceAccountName (#3028)
• 🔨 Update the TestTaskRunStatus e2e test to work on s390x architectures. (#3061)
• 🔨 Refactor Task Results Substitution (#3169)
• 🔨 Refactor Pipeline Parameters Validation (#3167)
• 🔨 Migrate some test builder references to structs (#3124)
• 🔨 Don't set TTY:true in the place-scripts step used to power script mode.(#3120)
• 🔨 Make this example actually run 🏃 (#3079)
• 🔨 Separate Step and Sidecar types (#3077)
• 🔨 Fix an error formatting in taskrun reconciler (#3073)
• 🔨 Remove the pkg/logging directory. (#3058)
• 🔨 Add v0.14.3 links to docs and examples (#3046)
• 🔨 Cleanup some code in artifact storage. (#2965)
• 🔨 Remove /bin/ash from examples (#3143)
• 🔨 Clean up test cases in pipelinerun_test.go (#3134)
• 🔨 Add concurrency limit to roadmap (#3130)
• 🔨 Allow to specify target cluster architecture for tests (#3128)
• 🔨 Makefile: bump gosec and golangci version (#3121)
• 🔨 Add multiarch specific fixes to the pipeline tests (#3107)
• 🔨 Add yamllint check and fix errors (#3101)
• 🔨 fix(typo): fix typos in docs (#3093)
• 🔨 Allow skipping some YAML tests (#3069)
• 🔨 The nop container image now includes the LICENSE and source code from vendor like the other images. (#3042)
• 🔨 Add the nop image to the nightly pipeline release (#3041)
• 🔨 Bump controller's image, nginx: 1.19.1, google/cloud-sdk: 302.0.0-slim (#3002)

Docs

• 📖 Remove documentation advocating for test builders (#3182)
• 📖 Remove vendor-specific cluster setup instructions (#3174)
• 📖 Update--cluster-version flag (#3165)
• 📖 Fix typo in entrypoint folder (#3153)
• 📖 Add Conditions CRD to deprecated features list (#3150)
• 📖 Add documentation on how to install nightly releases. (#3147)
• 📖 Update Openshift installation documentation (#3114)
• 📖 Fix broken link in auth.md (#3095)
• 📖 Add docs link for 0.15.2 (#3084)
• 📖 Fix small typo in install doc for default workspace config (#3074)
• 📖 Rewrite the "Authentication" doc for clarity and flow. (#3066)
• 📖 Update Docker Desktop setup and separate out MiniKube setup (#3065)
• 📖 Add links to v0.15.1 docs (#3062)
• 📖 Include More Details on Pod Deletion for Cancelled/Timed Out TaskRuns (#3053)
• 📖 Add v0.15.0 links to docs and examples (#3043)
• 📖 Add initial documentation for Runs (#2943)

Thanks

Thanks to these contributors who contributed to v0.16.0!

• ❤️ @FogDong
• ❤️ @ImJasonH
• ❤️ @NavidZ
• ❤️ @Peaorl
• ❤️ @afrittoli
• ❤️ @barthy1
• ❤️ @bobcatfish
• ❤️ @chmouel
• ❤️ @danielhelfand
• ❤️ @dinagraves
• ❤️ @dlorenc
• ❤️ @eqqe
• ❤️ @jerop
• ❤️ @jlpettersson
• ❤️ @mrutkows
• ❤️ @piyush-garg
• ❤️ @pritidesai
• ❤️ @savitaashture
• ❤️ @sbwsg
• ❤️ @sergetron
• ❤️ @skaegi
• ❤️ @vdemeester
• ❤️ @waveywaves
• ❤️ @ywluogg

🎉 Fix a bug in the pullrequest pipelineresource 🎉

The previous release, 0.15.1, was supposed to include a fix for the PullRequest Resource but was not published correctly with the new docker image. This release fixes that problem so that the released YAML includes the correct docker images.

-Docs @ v0.15.2
-Examples @ v0.15.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.15.2/release.yaml

Fixes

• 🐛 Ensure pullrequest-init is based on a root image (#3055)

Thanks

Thanks to these contributors who contributed to v0.15.2!

• ❤️ @sbwsg