Enable image signing (with chains) in Tektoncd Operator release pipeline
Open
Nobody has claimed this yet.
area/roadmap
good first issue
help wanted
kind/misc
lifecycle/frozen
- Dominant language
- Go
- Stars
- 608
- Forks
- 263
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 125
Description
At present, the images built in the versioned tektoncd/operator release pipelines are not signed by the tekton/chains instance running on plumbing cluster.
We need to modify the tektoncd/operator release pipeline to add an IMAGE result wihich can be used by tektoncd/chains instance for image signing.
Refer this pr: https://github.com/tektoncd/pipeline/pull/4156
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the versioned tektoncd/operator release pipelines and compare the referenced tektoncd/pipeline PR #4156. Confirm how the pipeline exposes an IMAGE result for the plumbing-cluster tektoncd/chains instance; done means release images provide that result and can be signed.
Written by the indexing model from the issue text.
Assessment
- Domain
- ci-cd, release
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100