feat: Tekton Operator v0.70.0 (#54)

ArthurVardevanyan · Feb 22, 2024 · 5e03b6b · 5e03b6b
1 parent c79b512
commit 5e03b6b
Show file tree

Hide file tree

Showing 6 changed files with 171 additions and 64 deletions.
diff --git a/.vscode/settings.json b/.vscode/settings.json
@@ -203,6 +203,7 @@
     "gitlab",
     "gitleaks",
     "gomod",
+    "gosmee",
     "gparted",
     "grafana",
     "growfs",

diff --git a/kubernetes/quay/base/postgres/quay/postgres.yaml b/kubernetes/quay/base/postgres/quay/postgres.yaml
@@ -71,7 +71,7 @@ spec:
           cpu: "50m"
         limits:
           memory: "700Mi"
-          cpu: "250m"
+          cpu: "500m"
       affinity:
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:

diff --git a/kubernetes/tekton/base/config.yaml b/kubernetes/tekton/base/config.yaml
@@ -33,18 +33,26 @@ spec:
       value: "true"
   pipeline:
     await-sidecar-readiness: true
+    coschedule: workspaces
     default-service-account: pipeline
     disable-affinity-assistant: true
     disable-creds-init: false
     embedded-status: full
     enable-api-fields: stable
     enable-bundles-resolver: true
+    enable-cel-in-whenexpression: false
     enable-cluster-resolver: true
     enable-custom-tasks: false
     enable-git-resolver: true
     enable-hub-resolver: true
+    enable-param-enum: false
     enable-provenance-in-status: false
+    enable-step-actions: false
     enable-tekton-oci-bundles: true
+    enforce-nonfalsifiability: none
+    keep-pod-on-cancel: false
+    max-result-size: 4096
+    metrics.count.enable-reason: false
     metrics.pipelinerun.duration-type: lastvalue
     metrics.pipelinerun.level: pipelinerun
     metrics.taskrun.duration-type: lastvalue
@@ -57,8 +65,10 @@ spec:
     performance:
       disable-ha: false
     require-git-ssh-secret-known-hosts: false
+    results-from: termination-message
     running-in-environment-with-injected-sidecars: true
     send-cloudevents-for-runs: false
+    set-security-context: false
     trusted-resources-verification-no-match-policy: ignore
   platforms:
     openshift:

diff --git a/kubernetes/tekton/components/gosmee/deployment.yaml b/kubernetes/tekton/components/gosmee/deployment.yaml
@@ -23,7 +23,7 @@ spec:
         runAsNonRoot: true
       containers:
         - name: gosmeed
-          image: ghcr.io/chmouel/gosmee:v0.20.2@sha256:3ad5dbb4653399a6e0f40924ac21435266cbba1c8a2ce1579c48c801b43ce863
+          image: ghcr.io/chmouel/gosmee:v0.21.0@sha256:564bc28cbdf4e868066c4d9ea073fee919b54046e8144008b3a7a0e015b9b137
           imagePullPolicy: Always
           args:
             - client

diff --git a/kubernetes/tekton/overlays/operator/dashboard-readonly.yaml b/kubernetes/tekton/overlays/operator/dashboard-readonly.yaml
@@ -263,7 +263,7 @@ subjects:
 ---
 apiVersion: v1
 data:
-  version: v0.40.1
+  version: v0.44.0
 kind: ConfigMap
 metadata:
   labels:
@@ -281,9 +281,9 @@ metadata:
     app.kubernetes.io/instance: tekton
     app.kubernetes.io/name: dashboard
     app.kubernetes.io/part-of: tekton-dashboard
-    app.kubernetes.io/version: v0.40.1
-    dashboard.tekton.dev/release: v0.40.1
-    version: v0.40.1
+    app.kubernetes.io/version: v0.44.0
+    dashboard.tekton.dev/release: v0.44.0
+    version: v0.44.0
   name: tekton-dashboard
   namespace: openshift-pipelines
 spec:
@@ -307,9 +307,9 @@ metadata:
     app.kubernetes.io/instance: tekton
     app.kubernetes.io/name: dashboard
     app.kubernetes.io/part-of: tekton-dashboard
-    app.kubernetes.io/version: v0.40.1
-    dashboard.tekton.dev/release: v0.40.1
-    version: v0.40.1
+    app.kubernetes.io/version: v0.44.0
+    dashboard.tekton.dev/release: v0.44.0
+    version: v0.44.0
   annotations:
     checkov.io/skip1: CKV_K8S_40=OpenShift Injects Random UID
     checkov.io/skip2: CKV_K8S_38=Operator Needs API Access
@@ -331,7 +331,7 @@ spec:
         app.kubernetes.io/instance: tekton
         app.kubernetes.io/name: dashboard
         app.kubernetes.io/part-of: tekton-dashboard
-        app.kubernetes.io/version: v0.40.1
+        app.kubernetes.io/version: v0.44.0
       name: tekton-dashboard
     spec:
       securityContext:
@@ -347,7 +347,6 @@ spec:
             - --read-only=false
             - --log-level=info
             - --log-format=json
-            - --namespace=
             - --namespaces=
             - --stream-logs=true
             - --external-logs=
@@ -363,7 +362,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: gcr.io/tekton-releases/github.com/tektoncd/dashboard/cmd/dashboard:v0.40.1@sha256:d55e28a4ffecde28565ab20bdd2eadc34c4a6087858b1a14b2aa11c9b49c8237
+          image: gcr.io/tekton-releases/github.com/tektoncd/dashboard/cmd/dashboard:v0.44.0@sha256:4bcfc6ee5b0c9d1256bb7e148cd9882fb65d4e83e18dc2dd11a3fa736f7a3b00
           livenessProbe:
             httpGet:
               path: /health
@@ -381,9 +380,9 @@ spec:
             capabilities:
               drop:
                 - ALL
-            # runAsGroup: 65532
+            #runAsGroup: 65532
             runAsNonRoot: true
-            # runAsUser: 65532
+            #runAsUser: 65532
             seccompProfile:
               type: RuntimeDefault
       nodeSelector: