Skip to content

fix: Use tlsVerify param in PipelineRun template for pack too#3575

Merged
knative-prow[bot] merged 4 commits intoknative:mainfrom
creydr:pass-tlsverify-to-pack-tekton-pipelinerun-too
Apr 8, 2026
Merged

fix: Use tlsVerify param in PipelineRun template for pack too#3575
knative-prow[bot] merged 4 commits intoknative:mainfrom
creydr:pass-tlsverify-to-pack-tekton-pipelinerun-too

Conversation

@creydr
Copy link
Copy Markdown
Member

@creydr creydr commented Apr 2, 2026

Currently we use the tlsVerify param only in the pipeline arguments for the s2i pipelines. This leads to issues when on remote builds using insecure registries with the pack builder.
This PR addresses it and passes the tlsVerify arg to the pack PipelineRun too. When set, it sets the CNB_INSECURE_REGISTRIES env var before building the image.

@knative-prow knative-prow bot requested review from dsimansk and jrangelramos April 2, 2026 16:14
@knative-prow knative-prow bot added the size/M 🤖 PR changes 30-99 lines, ignoring generated files. label Apr 2, 2026
@creydr
Copy link
Copy Markdown
Member Author

creydr commented Apr 2, 2026

/cc @matejvasek

@knative-prow knative-prow bot requested a review from matejvasek April 2, 2026 16:14
@codecov
Copy link
Copy Markdown

codecov bot commented Apr 2, 2026

Codecov Report

❌ Patch coverage is 64.28571% with 5 lines in your changes missing coverage. Please review.
✅ Project coverage is 56.24%. Comparing base (67c3fd2) to head (772825e).
⚠️ Report is 9 commits behind head on main.

Files with missing lines Patch % Lines
pkg/pipelines/tekton/templates.go 64.28% 4 Missing and 1 partial ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #3575      +/-   ##
==========================================
+ Coverage   56.13%   56.24%   +0.10%     
==========================================
  Files         180      180              
  Lines       20465    20479      +14     
==========================================
+ Hits        11489    11519      +30     
+ Misses       7781     7759      -22     
- Partials     1195     1201       +6     
Flag Coverage Δ
e2e 36.12% <35.71%> (+0.01%) ⬆️
e2e go 32.56% <50.00%> (+0.01%) ⬆️
e2e node 28.37% <50.00%> (+0.01%) ⬆️
e2e python 32.93% <50.00%> (+0.01%) ⬆️
e2e quarkus 28.52% <50.00%> (+0.03%) ⬆️
e2e rust 27.88% <50.00%> (-0.04%) ⬇️
e2e springboot 26.39% <50.00%> (+0.03%) ⬆️
e2e typescript 28.48% <50.00%> (-0.01%) ⬇️
e2e-config-ci 18.13% <0.00%> (?)
integration 17.44% <80.00%> (+0.02%) ⬆️
unit macos-14 43.36% <30.00%> (-0.01%) ⬇️
unit macos-latest 43.36% <30.00%> (-0.01%) ⬇️
unit ubuntu-24.04-arm 43.56% <28.57%> (-0.02%) ⬇️
unit ubuntu-latest 44.24% <30.00%> (-0.01%) ⬇️
unit windows-latest 43.38% <30.00%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@knative-prow knative-prow bot added size/S 🤖 PR changes 10-29 lines, ignoring generated files. and removed size/M 🤖 PR changes 30-99 lines, ignoring generated files. labels Apr 7, 2026
@creydr creydr requested a review from gauron99 April 7, 2026 07:59
@creydr
Copy link
Copy Markdown
Member Author

creydr commented Apr 7, 2026

/cherry-pick release-1.21
/cherry-pick release-1.20

@knative-prow-robot
Copy link
Copy Markdown

@creydr: once the present PR merges, I will cherry-pick it on top of release-1.20, release-1.21 in new PRs and assign them to you.

Details

In response to this:

/cherry-pick release-1.21
/cherry-pick release-1.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Copy link
Copy Markdown
Contributor

@gauron99 gauron99 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for the simplification. just one comment


// createPipelineTemplatePAC creates a Pipeline template used for PAC on-cluster build
// it creates the resource in the project directory
func createPipelineTemplatePAC(f fn.Function, labels map[string]string) error {
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think the new tls check is missing here? (createPipelineTemplatePAC function)

@creydr creydr requested a review from gauron99 April 7, 2026 19:39
@gauron99
Copy link
Copy Markdown
Contributor

gauron99 commented Apr 8, 2026

/lgtm
/approve

@knative-prow knative-prow bot added the lgtm 🤖 PR is ready to be merged. label Apr 8, 2026
@knative-prow
Copy link
Copy Markdown

knative-prow bot commented Apr 8, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: creydr, gauron99

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@knative-prow knative-prow bot added the approved 🤖 PR has been approved by an approver from all required OWNERS files. label Apr 8, 2026
@knative-prow knative-prow bot merged commit 46808fe into knative:main Apr 8, 2026
44 checks passed
@knative-prow-robot
Copy link
Copy Markdown

@creydr: new pull request created: #3590

Details

In response to this:

/cherry-pick release-1.21
/cherry-pick release-1.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@knative-prow-robot
Copy link
Copy Markdown

@creydr: #3575 failed to apply on top of branch "release-1.20":

Applying: Use tlsVerify param in Pipeline template for pack too
Using index info to reconstruct a base tree...
M	pkg/pipelines/tekton/templates_pack.go
Falling back to patching base and 3-way merge...
Auto-merging pkg/pipelines/tekton/templates_pack.go
CONFLICT (content): Merge conflict in pkg/pipelines/tekton/templates_pack.go
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 Use tlsVerify param in Pipeline template for pack too

Details

In response to this:

/cherry-pick release-1.21
/cherry-pick release-1.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved 🤖 PR has been approved by an approver from all required OWNERS files. lgtm 🤖 PR is ready to be merged. size/S 🤖 PR changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants