diff --git a/platform/vendor/tekton/chains/release.yaml b/platform/vendor/tekton/chains/release.yaml index edc761bf..4c49643b 100644 --- a/platform/vendor/tekton/chains/release.yaml +++ b/platform/vendor/tekton/chains/release.yaml @@ -63,8 +63,8 @@ metadata: app.kubernetes.io/component: controller app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-chains - pipeline.tekton.dev/release: "v0.25.1" - version: "v0.25.1" + pipeline.tekton.dev/release: "v0.27.1" + version: "v0.27.1" spec: replicas: 1 selector: @@ -84,13 +84,33 @@ spec: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-chains # # tekton.dev/release value replaced with inputs.params.versionTag in pipeline/tekton/publish.yaml - pipeline.tekton.dev/release: "v0.25.1" - version: "v0.25.1" + pipeline.tekton.dev/release: "v0.27.1" + version: "v0.27.1" spec: + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/os + operator: NotIn + values: + - windows + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + app.kubernetes.io/name: controller + app.kubernetes.io/component: controller + app.kubernetes.io/instance: default + app.kubernetes.io/part-of: tekton-chains + topologyKey: kubernetes.io/hostname + weight: 100 serviceAccountName: tekton-chains-controller containers: - name: tekton-chains-controller - image: ghcr.io/tektoncd/chains/controller-92006fd957c0afd31de6a40b3e33b39f:v0.25.1@sha256:05022c671e63971799cbe44af2631de2c0d6608b4a59214c4641af05411e28fc + image: ghcr.io/tektoncd/chains/github.com/tektoncd/chains/cmd/controller:v0.27.1@sha256:2011424841784c67b7fe9f5a103304859ebd9bb809b3326de6698528b548be17 volumeMounts: - name: signing-secrets mountPath: /etc/signing-secrets @@ -344,7 +364,7 @@ data: # this ConfigMap such that even if we don't have access to # other resources in the namespace, we can still access # this ConfigMap. - version: "v0.25.1" + version: "v0.27.1" --- # Copyright 2023 Tekton Authors LLC @@ -478,6 +498,9 @@ metadata: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-chains data: + # metrics-protocol specifies the OpenTelemetry export protocol for metrics. + # Supported values: prometheus (default), grpc, http/protobuf, none. + metrics-protocol: prometheus _example: | ################################ # # @@ -493,26 +516,20 @@ data: # this example block and unindented to be in the data block # to actually change the configuration. # - # metrics.backend-destination field specifies the system metrics destination. - # It supports either prometheus (the default) or stackdriver. - # Note: Using Stackdriver will incur additional charges. + # metrics-protocol specifies the OpenTelemetry export protocol. + # Supported values: prometheus (default), grpc, http/protobuf, none. # - metrics.backend-destination: prometheus + metrics-protocol: prometheus # - # metrics.stackdriver-project-id field specifies the Stackdriver project ID. This - # field is optional. When running on GCE, application default credentials will be - # used and metrics will be sent to the cluster's project if this field is - # not provided. + # metrics-endpoint is the OTLP collector endpoint to send metrics to. + # Required when metrics-protocol is grpc or http/protobuf. # - metrics.stackdriver-project-id: "" + metrics-endpoint: "otel-collector.observability.svc.cluster.local:4317" # - # metrics.allow-stackdriver-custom-metrics indicates whether it is allowed - # to send metrics to Stackdriver using "global" resource type and custom - # metric type. Setting this flag to "true" could cause extra Stackdriver - # charge. If metrics.backend-destination is not Stackdriver, this is - # ignored. + # metrics-export-interval is the interval at which metrics are exported. + # Uses Go duration format (e.g. 30s, 1m). Defaults to 30s. # - metrics.allow-stackdriver-custom-metrics: "false" + metrics-export-interval: 30s --- # Copyright 2023 Tekton Authors LLC diff --git a/platform/vendor/tekton/triggers/interceptors.yaml b/platform/vendor/tekton/triggers/interceptors.yaml index 8604eac4..dd574373 100644 --- a/platform/vendor/tekton/triggers/interceptors.yaml +++ b/platform/vendor/tekton/triggers/interceptors.yaml @@ -22,7 +22,7 @@ metadata: app.kubernetes.io/component: interceptors app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" # The data is populated at install time. --- @@ -49,10 +49,10 @@ metadata: app.kubernetes.io/name: core-interceptors app.kubernetes.io/component: interceptors app.kubernetes.io/instance: default - app.kubernetes.io/version: "v0.33.0" + app.kubernetes.io/version: "v0.36.0" app.kubernetes.io/part-of: tekton-triggers # tekton.dev/release value replaced with inputs.params.versionTag in triggers/tekton/publish.yaml - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" spec: replicas: 1 selector: @@ -67,17 +67,17 @@ spec: app.kubernetes.io/name: core-interceptors app.kubernetes.io/component: interceptors app.kubernetes.io/instance: default - app.kubernetes.io/version: "v0.33.0" + app.kubernetes.io/version: "v0.36.0" app.kubernetes.io/part-of: tekton-triggers app: tekton-triggers-core-interceptors - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" # version value replaced with inputs.params.versionTag in triggers/tekton/publish.yaml - version: "v0.33.0" + version: "v0.36.0" spec: serviceAccountName: tekton-triggers-core-interceptors containers: - name: tekton-triggers-core-interceptors - image: "ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5:v0.33.0@sha256:57e92f9bc420b920a4e7511c72d9ce5a9df9768a40608b4d40772a063eb58c9d" + image: "ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5:v0.36.0@sha256:35e9444ce57aed35f378b18d75e71483d81c41dc7fb6bf44119c5730d617ce54" ports: - containerPort: 8443 args: ["-logtostderr", "-stderrthreshold", "INFO"] @@ -127,11 +127,11 @@ metadata: app.kubernetes.io/name: tekton-triggers-core-interceptors app.kubernetes.io/component: interceptors app.kubernetes.io/instance: default - app.kubernetes.io/version: "v0.33.0" + app.kubernetes.io/version: "v0.36.0" app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" app: tekton-triggers-core-interceptors - version: "v0.33.0" + version: "v0.36.0" name: tekton-triggers-core-interceptors namespace: tekton-pipelines spec: diff --git a/platform/vendor/tekton/triggers/release.yaml b/platform/vendor/tekton/triggers/release.yaml index c55f19d1..8e47f442 100644 --- a/platform/vendor/tekton/triggers/release.yaml +++ b/platform/vendor/tekton/triggers/release.yaml @@ -398,8 +398,8 @@ metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" - version: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" + version: "v0.36.0" spec: group: triggers.tekton.dev scope: Cluster @@ -454,8 +454,8 @@ metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" - version: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" + version: "v0.36.0" spec: group: triggers.tekton.dev scope: Cluster @@ -524,8 +524,8 @@ metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" - version: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" + version: "v0.36.0" spec: group: triggers.tekton.dev scope: Namespaced @@ -630,8 +630,8 @@ metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" - version: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" + version: "v0.36.0" spec: group: triggers.tekton.dev scope: Namespaced @@ -686,8 +686,8 @@ metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" - version: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" + version: "v0.36.0" spec: group: triggers.tekton.dev scope: Namespaced @@ -758,8 +758,8 @@ metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" - version: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" + version: "v0.36.0" spec: group: triggers.tekton.dev scope: Namespaced @@ -832,8 +832,8 @@ metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" - version: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" + version: "v0.36.0" spec: group: triggers.tekton.dev scope: Namespaced @@ -908,7 +908,7 @@ metadata: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" # The data is populated at install time. --- apiVersion: admissionregistration.k8s.io/v1 @@ -919,7 +919,7 @@ metadata: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" webhooks: - admissionReviewVersions: - v1 @@ -939,7 +939,7 @@ metadata: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" webhooks: - admissionReviewVersions: - v1 @@ -959,7 +959,7 @@ metadata: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" webhooks: - admissionReviewVersions: - v1 @@ -1167,7 +1167,7 @@ data: # this ConfigMap such that even if we don't have access to # other resources in the namespace we still can have access to # this ConfigMap. - version: "v0.33.0" + version: "v0.36.0" --- # Copyright 2023 Tekton Authors LLC @@ -1357,6 +1357,7 @@ metadata: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers data: + metrics-protocol: prometheus _example: | ################################ # # @@ -1373,22 +1374,44 @@ data: # this example block and unindented to be in the data block # to actually change the configuration. - # metrics.backend-destination field specifies the system metrics destination. - # It supports either prometheus (the default) or stackdriver. - # Note: Using stackdriver will incur additional charges - metrics.backend-destination: prometheus + # OpenTelemetry Metrics Configuration + # Protocol for metrics export (prometheus, grpc, http/protobuf, none) + # Default if not specified: "none" + metrics-protocol: prometheus - # metrics.stackdriver-project-id field specifies the stackdriver project ID. This - # field is optional. When running on GCE, application default credentials will be - # used if this field is not provided. - metrics.stackdriver-project-id: "" + # Metrics endpoint (for grpc/http protocols) + # Default: empty (uses default OTLP endpoint) + metrics-endpoint: "" - # metrics.allow-stackdriver-custom-metrics indicates whether it is allowed to send metrics to - # Stackdriver using "global" resource type and custom metric type if the - # metrics are not supported by "knative_revision" resource type. Setting this - # flag to "true" could cause extra Stackdriver charge. - # If metrics.backend-destination is not Stackdriver, this is ignored. - metrics.allow-stackdriver-custom-metrics: "false" + # Metrics export interval (e.g., "30s", "1m") + # Default: empty (uses default interval) + metrics-export-interval: "" + + # OpenTelemetry Tracing Configuration + # Protocol for tracing export (grpc, http/protobuf, none, stdout) + # Default: none + tracing-protocol: none + + # Tracing endpoint (for grpc/http protocols) + # Default: empty + tracing-endpoint: "" + + # Tracing sampling rate (0.0 to 1.0) + # Default: 0.0 (no sampling) + tracing-sampling-rate: "0.0" + + # Runtime Configuration + # Enable profiling (enabled, disabled) + # Default: disabled + runtime-profiling: disabled + + # Runtime export interval (e.g., "15s") + # Default: 15s + runtime-export-interval: "15s" + + # Note: Legacy OpenCensus configuration (metrics.backend-destination, etc.) + # has been removed. OpenCensus is no longer supported. Please use the + # OpenTelemetry configuration options above. --- # Copyright 2019 Tekton Authors LLC @@ -1412,11 +1435,11 @@ metadata: app.kubernetes.io/name: controller app.kubernetes.io/component: controller app.kubernetes.io/instance: default - app.kubernetes.io/version: "v0.33.0" + app.kubernetes.io/version: "v0.36.0" app.kubernetes.io/part-of: tekton-triggers - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" app: tekton-triggers-controller - version: "v0.33.0" + version: "v0.36.0" name: tekton-triggers-controller namespace: tekton-pipelines spec: @@ -1455,10 +1478,10 @@ metadata: app.kubernetes.io/name: controller app.kubernetes.io/component: controller app.kubernetes.io/instance: default - app.kubernetes.io/version: "v0.33.0" + app.kubernetes.io/version: "v0.36.0" app.kubernetes.io/part-of: tekton-triggers # tekton.dev/release value replaced with inputs.params.versionTag in triggers/tekton/publish.yaml - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" spec: replicas: 1 selector: @@ -1473,12 +1496,12 @@ spec: app.kubernetes.io/name: controller app.kubernetes.io/component: controller app.kubernetes.io/instance: default - app.kubernetes.io/version: "v0.33.0" + app.kubernetes.io/version: "v0.36.0" app.kubernetes.io/part-of: tekton-triggers app: tekton-triggers-controller - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" # version value replaced with inputs.params.versionTag in triggers/tekton/publish.yaml - version: "v0.33.0" + version: "v0.36.0" spec: affinity: nodeAffinity: @@ -1503,8 +1526,8 @@ spec: serviceAccountName: tekton-triggers-controller containers: - name: tekton-triggers-controller - image: "ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315:v0.33.0@sha256:7b08b95ff8aa24e442a131e409c89169b85d09b52a028e87a66a41448c15e28c" - args: ["-logtostderr", "-stderrthreshold", "INFO", "-el-image", "ghcr.io/tektoncd/triggers/eventlistenersink-7ad1faa98cddbcb0c24990303b220bb8:v0.33.0@sha256:63fa6a0b4d4e3aab66e0347b9254f74b7df5ddecbe8ae77303f5c9872a181ffd", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "disable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3"] + image: "ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315:v0.36.0@sha256:03f192f4aebeb3471db9d390d0532ab4d49e5aeeb70327df91be445f3629e859" + args: ["-logtostderr", "-stderrthreshold", "INFO", "-el-image", "ghcr.io/tektoncd/triggers/eventlistenersink-7ad1faa98cddbcb0c24990303b220bb8:v0.36.0@sha256:ca044dc8b45cb5f5089faf553b4cbd5f0f8e05fcf8d66db7a703c88a40163a73", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "disable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3"] env: - name: SYSTEM_NAMESPACE valueFrom: @@ -1561,11 +1584,11 @@ metadata: app.kubernetes.io/name: webhook app.kubernetes.io/component: webhook app.kubernetes.io/instance: default - app.kubernetes.io/version: "v0.33.0" + app.kubernetes.io/version: "v0.36.0" app.kubernetes.io/part-of: tekton-triggers app: tekton-triggers-webhook - version: "v0.33.0" - triggers.tekton.dev/release: "v0.33.0" + version: "v0.36.0" + triggers.tekton.dev/release: "v0.36.0" spec: ports: - name: https-webhook @@ -1601,10 +1624,10 @@ metadata: app.kubernetes.io/name: webhook app.kubernetes.io/component: webhook app.kubernetes.io/instance: default - app.kubernetes.io/version: "v0.33.0" + app.kubernetes.io/version: "v0.36.0" app.kubernetes.io/part-of: tekton-triggers # tekton.dev/release value replaced with inputs.params.versionTag in triggers/tekton/publish.yaml - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" spec: replicas: 1 selector: @@ -1619,19 +1642,19 @@ spec: app.kubernetes.io/name: webhook app.kubernetes.io/component: webhook app.kubernetes.io/instance: default - app.kubernetes.io/version: "v0.33.0" + app.kubernetes.io/version: "v0.36.0" app.kubernetes.io/part-of: tekton-triggers app: tekton-triggers-webhook - triggers.tekton.dev/release: "v0.33.0" + triggers.tekton.dev/release: "v0.36.0" # version value replaced with inputs.params.versionTag in triggers/tekton/publish.yaml - version: "v0.33.0" + version: "v0.36.0" spec: serviceAccountName: tekton-triggers-webhook containers: - name: webhook # This is the Go import path for the binary that is containerized # and substituted here. - image: "ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6:v0.33.0@sha256:406e6c00767ab4b7debb804d9e069f7c44984544caee05d4392f73811ff2fd42" + image: "ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6:v0.36.0@sha256:02d25a89d4b58e7cf341ea32c44d4938eaa3a43b6eafb61d88b9abb0d8a6f67d" env: - name: SYSTEM_NAMESPACE valueFrom: diff --git a/platform/vendor/vendor.yaml b/platform/vendor/vendor.yaml index 835705a6..457a2848 100644 --- a/platform/vendor/vendor.yaml +++ b/platform/vendor/vendor.yaml @@ -4,21 +4,21 @@ files: validation_type: "rekor" destination_dir: "tekton/pipeline" version: "v1.6.3" - - release_file: "https://storage.googleapis.com/tekton-releases/chains/previous/v0.25.1/release.yaml" - rekor_uuid: "108e9186e8c5677aa8cbf847acc4ce0aed8e3b794dcb0f8e20e495c9a994ca636d04b6d2680d0227" + - release_file: "https://infra.tekton.dev/tekton-releases/chains/previous/v0.27.1/release.yaml" + rekor_uuid: "108e9186e8c5677a9c93c24b59fba7b3e2de163a740faeba34300825ad23565eb69a3d11ab071694" validation_type: "rekor" destination_dir: "tekton/chains" - version: "v0.25.1" - - release_file: "https://storage.googleapis.com/tekton-releases/triggers/previous/v0.33.0/release.yaml" - rekor_uuid: "108e9186e8c5677a920a272eb27aa6fcc7d307787cce0478a57a43ac0c60867837b79d610ea3608e" + version: "v0.27.1" + - release_file: "https://infra.tekton.dev/tekton-releases/triggers/previous/v0.36.0/release.yaml" + rekor_uuid: "108e9186e8c5677a6b2a69794ca92fea0d3bb45b80f923817fd184a39c84987cd53cee88dcf9dc5f" validation_type: "rekor" destination_dir: "tekton/triggers" - version: "v0.33.0" - - release_file: "https://storage.googleapis.com/tekton-releases/triggers/previous/v0.33.0/interceptors.yaml" - rekor_uuid: "108e9186e8c5677a920a272eb27aa6fcc7d307787cce0478a57a43ac0c60867837b79d610ea3608e" + version: "v0.36.0" + - release_file: "https://infra.tekton.dev/tekton-releases/triggers/previous/v0.36.0/interceptors.yaml" + rekor_uuid: "108e9186e8c5677a6b2a69794ca92fea0d3bb45b80f923817fd184a39c84987cd53cee88dcf9dc5f" validation_type: "rekor" destination_dir: "tekton/triggers" - version: "v0.33.0" + version: "v0.36.0" - release_file: "https://github.com/kyverno/kyverno/releases/download/v1.12.5/install.yaml" destination_dir: "kyverno/release" sha256: "5302f92058126eea00fbca638784f83e96b5240f6f4b59500a82c3ad23e50375"