chore(release-pipeline): update references to oci bucket #9189

anithapriyanatarajan · 2025-12-01T09:18:33Z

Changes

This pull request updates the Tekton release cheat sheet and release pipeline to reflect new infrastructure and workflow changes, primarily switching from Google Cloud (GCP) to Oracle Cloud Infrastructure (OCI) and updating release URLs. The changes standardize release parameters, update secret and bucket references, and revise instructions for interacting with clusters and release files.

Infrastructure and URL updates:

Changed all release file and bucket URLs from storage.googleapis.com to infra.tekton.dev, ensuring consistency with the new hosting location.
Updated cluster authentication instructions from using gcloud (GCP) to OCI CLI commands, reflecting the migration to Oracle Cloud.

Parameter and secret updates:

Adjusted pipeline start parameters by removing obsolete ones (e.g., serviceaccount, serviceAccountPath), adding repoName, and updating secret references from release-secret to oci-release-secret where appropriate.

Release workflow improvements:

Updated instructions for fetching controller image SHA and Rekor UUID to use the new release file URLs and improved parsing commands for compatibility.
Added guidance for renaming the Kubernetes context using the current context name, making it easier to follow for users unfamiliar with GCP context naming.

Submitter Checklist

As the author of this PR, please check off the items in this checklist:

Has Docs if any changes are user facing, including updates to minimum requirements e.g. Kubernetes version bumps
Has Tests included if any functionality added or changed
pre-commit Passed
Follows the commit message standard
Meets the Tekton contributor standards (including functionality, content, code)
Has a kind label. You can add one by adding a comment on this PR that contains /kind <type>. Valid types are bug, cleanup, design, documentation, feature, flake, misc, question, tep
Release notes block below has been updated with any user facing changes (API changes, bug fixes, changes requiring upgrade notices or deprecation warnings). See some examples of good release notes.
Release notes contains the string "action required" if the change requires additional action from users switching to the new release

Release Notes

NONE

/kind misc

anithapriyanatarajan · 2025-12-01T09:20:39Z

Need this to be on hold until the PRs in plumbing repos related to this PR are merged. Will update the details here shortly

afrittoli · 2025-12-01T10:00:11Z

Need this to be on hold until the PRs in plumbing repos related to this PR are merged. Will update the details here shortly

Could you include a link to said PRs please?

anithapriyanatarajan · 2025-12-01T14:00:02Z

Need this to be on hold until the PRs in plumbing repos related to this PR are merged. Will update the details here shortly

Could you include a link to said PRs please?

@afrittoli Please review - tektoncd/plumbing#2948

vdemeester · 2025-12-02T08:10:53Z

The plumbing PR is now merged 👼🏼

Signed-off-by: Anitha Natarajan <[email protected]>

anithapriyanatarajan · 2025-12-02T09:49:22Z

@vdemeester @afrittoli - Thankyou. Updated release pipeline and cheatsheet with the prcheck task and upload tasks poiting the latest plumbing and catalog versions. Please review

afrittoli · 2025-12-03T09:04:14Z

/retest

afrittoli

/approve

tekton-robot · 2025-12-03T09:04:39Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: afrittoli

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [afrittoli]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

afrittoli · 2025-12-03T09:20:07Z

tekton/README.md

+```
+Sample secret template for reference:
+```


NIT: missing new-lines

afrittoli · 2025-12-03T09:22:26Z

tekton/README.md

-kubectl apply -f tekton/account.yaml
-kubectl patch serviceaccount $ACCOUNT \
-  -p "{\"secrets\": [{\"name\": \"$GENERIC_SECRET\"}]}"
+1. When executing release pipelines, some tasks require `oci cli` commands. The CLI requires credentials which should be created as a Kubernetes secret and mounted to the respective task's workspace. For example refer the precheck definition.


NIT: It's ok to explain this, as it may be handy for troubleshooting.
The cheat-sheet should be an operational guide to what needs to be done step by step to make a release. The secret is deployed to the cluster via terraform, so the release manager should not need to create the secret.

afrittoli · 2025-12-03T09:27:03Z

tekton/release-cheat-sheet.md

    TEKTON_OLD_VERSION= # Example: v0.68.0
    TEKTON_RELEASE_NAME="Oriental Longhair Omnibot" # Name of the release
    TEKTON_PACKAGE=tektoncd/pipeline
+    TEKTON_REPO_NAME=pipeline


NIT: Why do we need this here? The repo name is already set to the valid default in the pipeline.

This is a needed for release-draft-oci pipeline that is called from plumbing repo.

vdemeester · 2025-12-03T10:07:18Z

/lgtm

afrittoli · 2025-12-03T10:43:49Z

tekton/release-cheat-sheet.md

-      --param releaseBucket=gs://tekton-releases/pipeline \
+      --param releaseBucket=tekton-releases \
      --param koExtraArgs="" \
      --workspace name=release-secret,secret=release-secret \


This should be oci-release-secret

afrittoli · 2025-12-03T11:06:18Z

tekton/release-cheat-sheet.md

    ```bash
-    RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/${TEKTON_VERSION}/release.yaml
-    CONTROLLER_IMAGE_SHA=$(curl $RELEASE_FILE | egrep 'ghcr.io.*controller' | cut -d'@' -f2)
+    RELEASE_FILE=https://infra.tekton.dev/tekton-releases/triggers/previous/${VERSION_TAG}/release.yaml


VERSION_TAG is not defined, it should be TEKTON_VERSION as it was before

The project is not triggers, it should be pipeline as it was

afrittoli · 2025-12-03T11:14:02Z

tekton/release-cheat-sheet.md

+        Create a pod template file:
+
+        ```shell
+        cat <<EOF > tekton/pod-template.yaml


This writes the file to tekton/pod-template.yaml and right after tries to get the file as pod-template.yaml (without the folder). Could you change this to pod-template instead?

We could add this file and the workspace one to .gitignore or we could do something like:

POD_TEMPLATE=$(mktemp) cat <<EOF > $POD_TEMPLATE (...) --pod-template "${POD_TEMPLATE}" \

for both files

afrittoli · 2025-12-03T11:50:52Z

tekton/release-cheat-sheet.md

 Optional: Add a photo of this release's "purr programmer" (someone's cat).

 1. Update [the catalog repo](https://github.com/tektoncd/catalog) test infrastructure
 to use the new release by updating the `RELEASE_YAML` link in [e2e-tests.sh](https://github.com/tektoncd/catalog/blob/main/test/e2e-tests.sh).


I forgot to update this in the past, perhaps you could update it as well?

1. Update [the catalog repo](https://github.com/tektoncd/catalog) test infrastructure to use the new release by updating the test matrix in the `[ci.yaml](https://github.com/tektoncd/catalog/blob/main/.github/workflows/ci.yaml)`.

github-project-automation bot added this to Tekton Community Roadmap Dec 1, 2025

github-project-automation bot moved this to Todo in Tekton Community Roadmap Dec 1, 2025

tekton-robot added kind/misc Categorizes issue or PR as a miscellaneuous one. release-note-none Denotes a PR that doesnt merit a release note. do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. labels Dec 1, 2025

tekton-robot requested review from jerop and twoGiants December 1, 2025 09:18

tekton-robot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label Dec 1, 2025

anithapriyanatarajan force-pushed the update-release-pipeline branch from fdf522d to 2d5417a Compare December 1, 2025 20:30

tekton-robot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Dec 2, 2025

chore(release-pipeline): update references to oci bucket

9eb642f

Signed-off-by: Anitha Natarajan <[email protected]>

anithapriyanatarajan force-pushed the update-release-pipeline branch from 02126d7 to 9eb642f Compare December 2, 2025 09:46

anithapriyanatarajan changed the title ~~WIP: chore(release-pipeline): update references to oci bucket~~ chore(release-pipeline): update references to oci bucket Dec 2, 2025

tekton-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Dec 2, 2025

anithapriyanatarajan closed this Dec 2, 2025

github-project-automation bot moved this from Todo to Done in Tekton Community Roadmap Dec 2, 2025

anithapriyanatarajan reopened this Dec 2, 2025

github-project-automation bot moved this from Done to In Progress in Tekton Community Roadmap Dec 2, 2025

anithapriyanatarajan closed this Dec 2, 2025

github-project-automation bot moved this from In Progress to Done in Tekton Community Roadmap Dec 2, 2025

anithapriyanatarajan reopened this Dec 2, 2025

github-project-automation bot moved this from Done to In Progress in Tekton Community Roadmap Dec 2, 2025

afrittoli reviewed Dec 3, 2025

View reviewed changes

tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Dec 3, 2025

afrittoli reviewed Dec 3, 2025

View reviewed changes

tekton-robot assigned vdemeester Dec 3, 2025

tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Dec 3, 2025

vdemeester merged commit 478d30f into tektoncd:main Dec 3, 2025
78 of 87 checks passed

github-project-automation bot moved this from In Progress to Done in Tekton Community Roadmap Dec 3, 2025

afrittoli reviewed Dec 3, 2025

View reviewed changes

anithapriyanatarajan mentioned this pull request Dec 3, 2025

fix: release pipeline feedback #9210

Merged

8 tasks

chore(release-pipeline): update references to oci bucket #9189

chore(release-pipeline): update references to oci bucket #9189

Uh oh!

Conversation

anithapriyanatarajan commented Dec 1, 2025

Changes

Submitter Checklist

Release Notes

Uh oh!

anithapriyanatarajan commented Dec 1, 2025

Uh oh!

afrittoli commented Dec 1, 2025

Uh oh!

anithapriyanatarajan commented Dec 1, 2025

Uh oh!

vdemeester commented Dec 2, 2025

Uh oh!

anithapriyanatarajan commented Dec 2, 2025

Uh oh!

afrittoli commented Dec 3, 2025

Uh oh!

afrittoli left a comment

Choose a reason for hiding this comment

Uh oh!

tekton-robot commented Dec 3, 2025

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

anithapriyanatarajan Dec 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

vdemeester commented Dec 3, 2025

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

anithapriyanatarajan Dec 3, 2025 •

edited

Loading