chore(chart-deps): update tekton-pipelines to version 1.14.0

apps.yaml

@@ -149,7 +149,7 @@ appsInfo:
     isAlpha: true
   tekton:
     title: Tekton Pipelines
-    appVersion: 1.12.0
+    appVersion: 1.14.0
     repo: https://github.com/tektoncd/pipeline
     maintainers: Tekton
     relatedLinks:

chart/chart-index/Chart.yaml

@@ -109,7 +109,7 @@ dependencies:
     repository: https://bitnami-labs.github.io/sealed-secrets/
   - name: tekton-pipeline
     alias: tekton-pipelines
-    version: 1.12.0
+    version: 1.14.0
     repository: https://cdfoundation.github.io/tekton-helm-chart/
   - name: trivy-operator
     version: 0.32.1

charts/tekton-pipelines/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
-appVersion: 1.12.0
+appVersion: 1.14.0
 description: A Helm chart for Tekton Pipelines
 home: https://github.com/cdfoundation/tekton-helm-chart
 icon: https://avatars2.githubusercontent.com/u/47602533
 name: tekton-pipeline
-version: 1.12.0
+version: 1.14.0

charts/tekton-pipelines/crds/customruns.tekton.dev-crd.yaml

@@ -19,8 +19,8 @@ metadata:
   labels:
     app.kubernetes.io/instance: default
     app.kubernetes.io/part-of: tekton-pipelines
-    pipeline.tekton.dev/release: "v1.12.0"
-    version: "v1.12.0"
+    pipeline.tekton.dev/release: "v1.14.0"
+    version: "v1.14.0"
 spec:
   group: tekton.dev
   preserveUnknownFields: false

charts/tekton-pipelines/crds/pipelineruns.tekton.dev-crd.yaml

@@ -19,8 +19,8 @@ metadata:
   labels:
     app.kubernetes.io/instance: default
     app.kubernetes.io/part-of: tekton-pipelines
-    pipeline.tekton.dev/release: "v1.12.0"
-    version: "v1.12.0"
+    pipeline.tekton.dev/release: "v1.14.0"
+    version: "v1.14.0"
 spec:
   group: tekton.dev
   preserveUnknownFields: false
@@ -2379,6 +2379,8 @@ spec:
                             once we're confident old PipelineRuns have been cleaned up.
                             See issue #8359 for context.
                           type: boolean
+                        enableTerminationMessageCompression:
+                          type: boolean
                         enableWaitExponentialBackoff:
                           type: boolean
                         enforceNonfalsifiability:
@@ -2757,6 +2759,8 @@ spec:
                                       once we're confident old PipelineRuns have been cleaned up.
                                       See issue #8359 for context.
                                     type: boolean
+                                  enableTerminationMessageCompression:
+                                    type: boolean
                                   enableWaitExponentialBackoff:
                                     type: boolean
                                   enforceNonfalsifiability:
@@ -3028,6 +3032,8 @@ spec:
                                             once we're confident old PipelineRuns have been cleaned up.
                                             See issue #8359 for context.
                                           type: boolean
+                                        enableTerminationMessageCompression:
+                                          type: boolean
                                         enableWaitExponentialBackoff:
                                           type: boolean
                                         enforceNonfalsifiability:
@@ -5472,6 +5478,8 @@ spec:
                             once we're confident old PipelineRuns have been cleaned up.
                             See issue #8359 for context.
                           type: boolean
+                        enableTerminationMessageCompression:
+                          type: boolean
                         enableWaitExponentialBackoff:
                           type: boolean
                         enforceNonfalsifiability:

charts/tekton-pipelines/crds/pipelines.tekton.dev-crd.yaml

@@ -19,8 +19,8 @@ metadata:
   labels:
     app.kubernetes.io/instance: default
     app.kubernetes.io/part-of: tekton-pipelines
-    pipeline.tekton.dev/release: "v1.12.0"
-    version: "v1.12.0"
+    pipeline.tekton.dev/release: "v1.14.0"
+    version: "v1.14.0"
 spec:
   group: tekton.dev
   preserveUnknownFields: false
@@ -835,8 +835,10 @@ spec:
                         x-kubernetes-list-type: atomic
                       pipelineRef:
                         description: |-
-                          PipelineRef is a reference to a pipeline definition
-                          Note: PipelineRef is in preview mode and not yet supported
+                          PipelineRef is a reference to a pipeline definition.
+                          This is an alpha field. You must set the "enable-api-fields" feature flag
+                          to "alpha" for this field to be supported. When enabled, the referenced
+                          Pipeline is executed as a child PipelineRun owned by the parent PipelineRun.
                         type: object
                         properties:
                           apiVersion:
@@ -871,8 +873,10 @@ spec:
                             type: string
                       pipelineSpec:
                         description: |-
-                          PipelineSpec is a specification of a pipeline
-                          Note: PipelineSpec is in preview mode and not yet supported
+                          PipelineSpec is a specification of a pipeline.
+                          This is an alpha field. You must set the "enable-api-fields" feature flag
+                          to "alpha" for this field to be supported. When enabled, the embedded
+                          Pipeline is executed as a child PipelineRun owned by the parent PipelineRun.
                           Specifying PipelineSpec can be disabled by setting
                           `disable-inline-spec` feature flag.
                           See Pipeline.spec (API version: tekton.dev/v1)
@@ -1174,8 +1178,10 @@ spec:
                         x-kubernetes-list-type: atomic
                       pipelineRef:
                         description: |-
-                          PipelineRef is a reference to a pipeline definition
-                          Note: PipelineRef is in preview mode and not yet supported
+                          PipelineRef is a reference to a pipeline definition.
+                          This is an alpha field. You must set the "enable-api-fields" feature flag
+                          to "alpha" for this field to be supported. When enabled, the referenced
+                          Pipeline is executed as a child PipelineRun owned by the parent PipelineRun.
                         type: object
                         properties:
                           apiVersion:
@@ -1210,8 +1216,10 @@ spec:
                             type: string
                       pipelineSpec:
                         description: |-
-                          PipelineSpec is a specification of a pipeline
-                          Note: PipelineSpec is in preview mode and not yet supported
+                          PipelineSpec is a specification of a pipeline.
+                          This is an alpha field. You must set the "enable-api-fields" feature flag
+                          to "alpha" for this field to be supported. When enabled, the embedded
+                          Pipeline is executed as a child PipelineRun owned by the parent PipelineRun.
                           Specifying PipelineSpec can be disabled by setting
                           `disable-inline-spec` feature flag.
                           See Pipeline.spec (API version: tekton.dev/v1)

charts/tekton-pipelines/crds/stepactions.tekton.dev-crd.yaml

@@ -19,8 +19,8 @@ metadata:
   labels:
     app.kubernetes.io/instance: default
     app.kubernetes.io/part-of: tekton-pipelines
-    pipeline.tekton.dev/release: "v1.12.0"
-    version: "v1.12.0"
+    pipeline.tekton.dev/release: "v1.14.0"
+    version: "v1.14.0"
 spec:
   group: tekton.dev
   preserveUnknownFields: false

charts/tekton-pipelines/crds/taskruns.tekton.dev-crd.yaml

@@ -19,8 +19,8 @@ metadata:
   labels:
     app.kubernetes.io/instance: default
     app.kubernetes.io/part-of: tekton-pipelines
-    pipeline.tekton.dev/release: "v1.12.0"
-    version: "v1.12.0"
+    pipeline.tekton.dev/release: "v1.14.0"
+    version: "v1.14.0"
 spec:
   group: tekton.dev
   preserveUnknownFields: false
@@ -1894,6 +1894,8 @@ spec:
                             once we're confident old PipelineRuns have been cleaned up.
                             See issue #8359 for context.
                           type: boolean
+                        enableTerminationMessageCompression:
+                          type: boolean
                         enableWaitExponentialBackoff:
                           type: boolean
                         enforceNonfalsifiability:
@@ -2165,6 +2167,8 @@ spec:
                                   once we're confident old PipelineRuns have been cleaned up.
                                   See issue #8359 for context.
                                 type: boolean
+                              enableTerminationMessageCompression:
+                                type: boolean
                               enableWaitExponentialBackoff:
                                 type: boolean
                               enforceNonfalsifiability:
@@ -4044,6 +4048,8 @@ spec:
                             once we're confident old PipelineRuns have been cleaned up.
                             See issue #8359 for context.
                           type: boolean
+                        enableTerminationMessageCompression:
+                          type: boolean
                         enableWaitExponentialBackoff:
                           type: boolean
                         enforceNonfalsifiability:
@@ -4307,6 +4313,8 @@ spec:
                                   once we're confident old PipelineRuns have been cleaned up.
                                   See issue #8359 for context.
                                 type: boolean
+                              enableTerminationMessageCompression:
+                                type: boolean
                               enableWaitExponentialBackoff:
                                 type: boolean
                               enforceNonfalsifiability:

charts/tekton-pipelines/crds/tasks.tekton.dev-crd.yaml

@@ -19,8 +19,8 @@ metadata:
   labels:
     app.kubernetes.io/instance: default
     app.kubernetes.io/part-of: tekton-pipelines
-    pipeline.tekton.dev/release: "v1.12.0"
-    version: "v1.12.0"
+    pipeline.tekton.dev/release: "v1.14.0"
+    version: "v1.14.0"
 spec:
   group: tekton.dev
   preserveUnknownFields: false
@@ -1510,8 +1510,6 @@ spec:
                 stepTemplate:
                   description: StepTemplate
                   type: object
-                  required:
-                    - name
                   properties:
                     args:
                       description: Args

charts/tekton-pipelines/crds/verificationpolicies.tekton.dev-crd.yaml

@@ -19,8 +19,8 @@ metadata:
   labels:
     app.kubernetes.io/instance: default
     app.kubernetes.io/part-of: tekton-pipelines
-    pipeline.tekton.dev/release: "v1.12.0"
-    version: "v1.12.0"
+    pipeline.tekton.dev/release: "v1.14.0"
+    version: "v1.14.0"
 spec:
   group: tekton.dev
   versions:

charts/tekton-pipelines/templates/config-tracing-cm.yaml

@@ -12,6 +12,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+# NOTE: Exported traces may include Kubernetes resource identifiers (e.g. TaskRun/PipelineRun
+# names and namespaces) as span attributes. Treat the trace backend as a trusted observability
+# system. See docs/developers/tracing.md for details.
 apiVersion: v1
 kind: ConfigMap
 metadata:

charts/tekton-pipelines/templates/config.webhook.pipeline.tekton.dev-valwebhookcfg.yaml

@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/component: webhook
     app.kubernetes.io/instance: default
     app.kubernetes.io/part-of: tekton-pipelines
-    pipeline.tekton.dev/release: "v1.12.0"
+    pipeline.tekton.dev/release: "v1.14.0"
 webhooks:
   - admissionReviewVersions: ["v1"]
     clientConfig:

charts/tekton-pipelines/templates/pipelines-info-cm.yaml

@@ -25,4 +25,4 @@ data:
   # this ConfigMap such that even if we don't have access to
   # other resources in the namespace we still can have access to
   # this ConfigMap.
-  version: "v1.12.0"
+  version: "v1.14.0"

charts/tekton-pipelines/templates/tekton-events-controller-deploy.yaml

@@ -6,9 +6,9 @@ metadata:
     app.kubernetes.io/instance: default
     app.kubernetes.io/name: events
     app.kubernetes.io/part-of: tekton-pipelines
-    app.kubernetes.io/version: v1.12.0
-    pipeline.tekton.dev/release: v1.12.0
-    version: v1.12.0
+    app.kubernetes.io/version: v1.14.0
+    pipeline.tekton.dev/release: v1.14.0
+    version: v1.14.0
   name: tekton-events-controller
 spec:
   replicas: 1
@@ -26,9 +26,9 @@ spec:
         app.kubernetes.io/instance: default
         app.kubernetes.io/name: events
         app.kubernetes.io/part-of: tekton-pipelines
-        app.kubernetes.io/version: v1.12.0
-        pipeline.tekton.dev/release: v1.12.0
-        version: v1.12.0
+        app.kubernetes.io/version: v1.14.0
+        pipeline.tekton.dev/release: v1.14.0
+        version: v1.14.0
     spec:
       affinity:
         nodeAffinity:
@@ -101,6 +101,10 @@ spec:
         - mountPath: /etc/config-registry-cert
           name: config-registry-cert
         image: {{ .Values.eventscontroller.deployment.image }}
+      imagePullSecrets:
+          {{- with .Values.eventscontroller.imagePullSecrets }}
+            {{- toYaml . | nindent 6 }}
+          {{- end }}
       serviceAccountName: tekton-events-controller
       volumes:
       - configMap:

charts/tekton-pipelines/templates/tekton-events-controller-svc.yaml

@@ -5,13 +5,13 @@ metadata:
     app.kubernetes.io/name: events
     app.kubernetes.io/component: events
     app.kubernetes.io/instance: default
-    app.kubernetes.io/version: "v1.12.0"
+    app.kubernetes.io/version: "v1.14.0"
     app.kubernetes.io/part-of: tekton-pipelines
     # tekton.dev/release value replaced with inputs.params.versionTag in pipeline/tekton/publish.yaml
-    pipeline.tekton.dev/release: "v1.12.0"
+    pipeline.tekton.dev/release: "v1.14.0"
     # labels below are related to istio and should not be used for resource lookup
     app: tekton-events-controller
-    version: "v1.12.0"
+    version: "v1.14.0"
   name: tekton-events-controller
 spec:
   ports:

charts/tekton-pipelines/templates/tekton-pipelines-controller-deploy.yaml

@@ -6,12 +6,12 @@ metadata:
     app.kubernetes.io/instance: default
     app.kubernetes.io/name: controller
     app.kubernetes.io/part-of: tekton-pipelines
-    app.kubernetes.io/version: v1.12.0
+    app.kubernetes.io/version: v1.14.0
       {{- with .Values.controller.deployment.labels }}
         {{- toYaml . | nindent 4 }}
       {{- end}}
-    pipeline.tekton.dev/release: v1.12.0
-    version: v1.12.0
+    pipeline.tekton.dev/release: v1.14.0
+    version: v1.14.0
   name: tekton-pipelines-controller
 spec:
   replicas: 1
@@ -34,12 +34,12 @@ spec:
         app.kubernetes.io/instance: default
         app.kubernetes.io/name: controller
         app.kubernetes.io/part-of: tekton-pipelines
-        app.kubernetes.io/version: v1.12.0
+        app.kubernetes.io/version: v1.14.0
           {{- with .Values.controller.pod.labels }}
             {{- toYaml . | nindent 8 }}
           {{- end}}
-        pipeline.tekton.dev/release: v1.12.0
-        version: v1.12.0
+        pipeline.tekton.dev/release: v1.14.0
+        version: v1.14.0
     spec:
       affinity:
           {{- with .Values.controller.affinity }}
@@ -142,6 +142,10 @@ spec:
         - mountPath: /etc/config-registry-cert
           name: config-registry-cert
         image: {{ .Values.controller.deployment.image }}
+      imagePullSecrets:
+          {{- with .Values.controller.imagePullSecrets }}
+            {{- toYaml . | nindent 6 }}
+          {{- end }}
       nodeSelector:
           {{- with .Values.controller.nodeSelector }}
             {{- toYaml . |  nindent 8 }}

charts/tekton-pipelines/templates/tekton-pipelines-controller-svc.yaml

@@ -5,13 +5,13 @@ metadata:
     app.kubernetes.io/name: controller
     app.kubernetes.io/component: controller
     app.kubernetes.io/instance: default
-    app.kubernetes.io/version: "v1.12.0"
+    app.kubernetes.io/version: "v1.14.0"
     app.kubernetes.io/part-of: tekton-pipelines
     # tekton.dev/release value replaced with inputs.params.versionTag in pipeline/tekton/publish.yaml
-    pipeline.tekton.dev/release: "v1.12.0"
+    pipeline.tekton.dev/release: "v1.14.0"
     # labels below are related to istio and should not be used for resource lookup
     app: tekton-pipelines-controller
-    version: "v1.12.0"
+    version: "v1.14.0"
   name: tekton-pipelines-controller
 spec:
   ports: