Tekton Triggers release v0.21.0 "Tekton Triggers"
-Docs @ v0.21.0
-Examples @ v0.21.0
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.21.0/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.21.0/interceptors.yamlAttestation
The Rekor UUID for this release is 362f8ecba72f432613304d144d86d7ab8b4bf16899268cac0fdb0ec939822bdba5d36e69d467ec46
Obtain the attestation:
REKOR_UUID=362f8ecba72f432613304d144d86d7ab8b4bf16899268cac0fdb0ec939822bdba5d36e69d467ec46
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.21.0/release.yaml
INTERCEPTORS_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.21.0/interceptors.yaml
REKOR_UUID=362f8ecba72f432613304d144d86d7ab8b4bf16899268cac0fdb0ec939822bdba5d36e69d467ec46
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.21.0@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
curl "$INTERCEPTORS_FILE" >> release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
doneChanges
Features
- ✨ Add validation and rotation of certificate for clusterinterceptor (#1385)
Triggers Interceptor now does validation and rotation of certificates if expires
Deprecation Notices
- 🚨 Deprecate Trigger as well as Namespace-Selector in EventListener Spec (#1420)
Deprecation Warning: Having both Triggers as well as Namespace-Selector in EventListener Spec is deprecated.
Fixes
Remove Validation on Deleting Objects
- 🐛 Fix Knative e2e-tests flakiness & update to v1.6.0 (#1412)
- 🐛 Fix cannot create ingress for getting-started guide (#1418)
- 🐛 Update log keys to match logstream (#1424)
action required
Log lines formatted as JSON have the severity in "severity" (was "level"), timestamp in "timestamp" (was "ts"), and message in "message" (was "msg").
Misc
- 🔨 Update webhook-run.yaml (#1386)
- 🔨 refactor interceptors logger and secret getter (#1409)
- 🔨 Add v0.20.2 docs link (#1410)
- 🔨 Fix Knative e2e-tests flakiness & update to v1.6.0 (#1412)
- 🔨 Update Cronjob API in Example to v1 (#1415)
- 🔨 Bump golangci-lint to v1.47.2 to support Go 1.18 (#1416)
- 🔨 Prefer SHA256 in Github interceptor (#1417)
Prefer SHA256 for validation of Github payloads
- 🔨 Add AzureRepo push and pull request examples (#1419)
Added sample examples for AzureRepo
EventListener error logs will no longer contain a stacktrace as part of the structured log by default.
- 🔨 Add examples for Bitbucket Cloud and Update doc (#1428)
Add example support for Bitbucket Cloud
- 🔨 Add temporary GOPATH script for codegen (#1440)
- 🔨 Update ko to v0.12.0 (#1443)
- 🔨 Bump Pipeline version to v0.39.0 (#1444)
Security
- 🔐 Add Nil Check for context in the core interceptors (#1432)
Docs
-
📖 Fix the link for Triggers Website config (#1366)
-
📖 Add v0.20.1 docs link (#1384)
-
📖 Update cel_expressions.md (#1395)
-
📖 Setting Debug level for EventListener (#1401)
-
📖 Update RBAC link to point to k8s docs (#1411)
-
📖 Update Install instructions for binding-eval tool (#1413)
-
📖 Fix tkn command in troubleshooting (#1425)
-
📖 Document that examples expect default namespace (#1426)
-
📖 Update installation document (#1436)
-
📖 Add that CloudEvents require Alpha flag (#1442)
Thanks
Thanks to these contributors who contributed to v0.21.0!
- ❤️ @abayer
- ❤️ @clcchai
- ❤️ @dibyom
- ❤️ @geriom
- ❤️ @jasperjonker
- ❤️ @khrm
- ❤️ @lbernick
- ❤️ @marniks7
- ❤️ @savitaashture
Extra shout-out for awesome release notes:
- 😍 @clcchai
- 😍 @dibyom
- 😍 @khrm
- 😍 @lbernick
- 😍 @savitaashture
