Tekton Dashboard release v0.43.1 LTS
This Dashboard LTS release supports Pipelines v0.53.x LTS, and v0.56.x LTS, as well as Triggers v0.24.x LTS, and v0.25.x.
Attestation
The Rekor UUID for this release is 24296fb24b8ad77a095cf37815542fd2091234a701df065717fa4d6609d9c6b5fd42e00014277702
Verify that all container images in the release file are in the attestation:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.43.1/release.yaml
REKOR_UUID=24296fb24b8ad77a095cf37815542fd2091234a701df065717fa4d6609d9c6b5fd42e00014277702
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.43.1@sha256:" + .digest.sha256')
# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml
# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
echo " ===> ok"
else
echo " ===> no match"
fi
Fixes
- 🐛 Fix for Create PipelineRun specifying ServiceAccount with v1 API #3291
Thanks
Thanks to these contributors who contributed to v0.43.1!
- ❤️ @AlanGreene