Tags: carlossagala/pipeline
Tags
Take -version into account in the controller ☕️ Set the `version.PipelineVersion` properly in the controller main so that we annotate the object with the version (instead of a blank string). Signed-off-by: Vincent Demeester <vdemeest@redhat.com> (cherry picked from commit f59e1be) Signed-off-by: Vincent Demeester <vdemeest@redhat.com>
Add docs demonstrating how to share a Workspace with Sidecars Prior to this commit we didn't have any documentation showing how to share a Workspace between Steps of a Task and the Task's Sidecars. In fact there were two bugs that prevented this from working correctly. Those bugs have since been squashed. This commit adds documentation and an example yaml showing how to share a Workspace between a Task's Steps and its Sidecars.
Omit NotFound when cleaning up the Affinity Assistant The PipelineRun reconciler cleanup the affinity assistant when the PipelineRun is completed. If the cleanup-function is called more than once, the DELETE request will return a NotFound response. It does not make sense to return NotFound responses as an error, since this is what we want to achieve. (cherry picked from commit 204a403)
Disable keep-alive for cloud-event connections Disable keep alive forces the HTTP client to drop the connection once a response is received. This avoids building up large numbers of idle connections and it fixes the immediate issue. After this we may want to see how to ensure we can re-use connection and also set and idle-connection timeout. Fixes tektoncd#3190 (cherry picked from commit 7a9a85b)
Add support for repeated PVC-claim but using subPath in AA-validation The validation for compatibility with the Affinity Assistant does not support the same PVC repeated, but using different subPaths. This patch adds support for this case and tests for the validation. Co-authored-by: Scott <sbws@google.com>
Ensure pullrequest-init is based on a root image The PullRequest Resource, when used as an output, is able to read in a pr.json to determine if there have been any changes that require syncing to github. pr.json may have been written by any prior Step with any ownership settings. If pr.json was written with root permissions then the PullRequest Resource needs to be have permissions to read that file. The PullRequest Resource image has been based on a nonroot image in our `.ko.yaml` since 0.13 of Tekton Pipelines ([`.ko.yaml` was updated here](tektoncd#2606)). However, the published images did not match the configuration in the `.ko.yaml` until 0.15.0 ([our `tekton/publish.yaml` was brought into line with `.ko.yaml` here](tektoncd#3018)). Given that copying or writing pr.json in a Step can result in the file being owned by root using a nonroot image is not a suitable choice of base image - the output PullRequest attempts to open pr.json and hits a permissions error. This commit updates the PullRequest image to be based on distroless static instead of nonroot and adds an example yaml file that should exercise the behaviour of copying the file from an input to output pullrequest resource.
Ensure pullrequest-init is based on a root image The PullRequest Resource, when used as an output, is able to read in a pr.json to determine if there have been any changes that require syncing to github. pr.json may have been written by any prior Step with any ownership settings. If pr.json was written with root permissions then the PullRequest Resource needs to be have permissions to read that file. The PullRequest Resource image has been based on a nonroot image in our `.ko.yaml` since 0.13 of Tekton Pipelines ([`.ko.yaml` was updated here](tektoncd#2606)). However, the published images did not match the configuration in the `.ko.yaml` until 0.15.0 ([our `tekton/publish.yaml` was brought into line with `.ko.yaml` here](tektoncd#3018)). Given that copying or writing pr.json in a Step can result in the file being owned by root using a nonroot image is not a suitable choice of base image - the output PullRequest attempts to open pr.json and hits a permissions error. This commit updates the PullRequest image to be based on distroless static instead of nonroot and adds an example yaml file that should exercise the behaviour of copying the file from an input to output pullrequest resource.
Add pipeline run support for cloud events Replace the pipeline run controller own config store with the shared one used by the taskrun controller too. The pipeline run config store is only useful to the artifact storage, however the artifact storage loads the config by fetching the configmap via the kube client, so it does not use the config store. Attaching the shared config store to the controller, along with the cloud events client, enables the pipeline run controller to start sending cloud events for all events where we send k8s events today (except for error ones). Add a reconciler unit test to verify that events are sent when the sink is configured. Drop reconciler/pipelinerun/config because it's not used. It was injected in the pipeline run controller before, but not used. We can add the store for artifact configs back in a different commit, but it wil have to be part of the shared store. (cherry picked from commit e6c91d2) Signed-off-by: Vincent Demeester <vincent@sbr.pm>
PreviousNext