Skip to content

feat(reconciler): filter TaskRun/PipelineRun by spec.managedBy - #1882

Open
khrm wants to merge 1 commit into
tektoncd:mainfrom
khrm:managed-by-filter
Open

feat(reconciler): filter TaskRun/PipelineRun by spec.managedBy#1882
khrm wants to merge 1 commit into
tektoncd:mainfrom
khrm:managed-by-filter

Conversation

@khrm

@khrm khrm commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Skip signing runs managed by external controllers by filtering on the spec.managedBy field at the informer level. Runs with nil, empty, or "tekton.dev/pipeline" managedBy are always accepted. Additional values can be allowed via the "filter.managed-by" key in chains-config.

Changes

Submitter Checklist

As the author of this PR, please check off the items in this checklist:

  • Has Docs included if any changes are user facing
  • Has Tests included if any functionality added or changed
  • Follows the commit message standard
  • Meets the Tekton contributor standards (including
    functionality, content, code)
  • Release notes block below has been updated with any user facing changes (API changes, bug fixes, changes requiring upgrade notices or deprecation warnings)
  • Release notes contains the string "action required" if the change requires additional action from users switching to the new release

Release Notes

NONE

@tekton-robot tekton-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Aug 12, 2026
@tekton-robot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign enarha after the PR has been reviewed.
You can assign the PR to them by writing /assign @enarha in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. label Aug 12, 2026

@khrm khrm left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/kind feature

@tekton-robot tekton-robot added the kind/feature Categorizes issue or PR as related to a new feature. label Aug 12, 2026
@codecov

codecov Bot commented Aug 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 62.05%. Comparing base (f7d1ba7) to head (e017145).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1882      +/-   ##
==========================================
+ Coverage   61.95%   62.05%   +0.10%     
==========================================
  Files          64       64              
  Lines        4071     4087      +16     
==========================================
+ Hits         2522     2536      +14     
- Misses       1268     1269       +1     
- Partials      281      282       +1     
Flag Coverage Δ
unit-tests 62.05% <ø> (+0.10%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@khrm
khrm force-pushed the managed-by-filter branch 3 times, most recently from 3badbab to ab870dd Compare August 13, 2026 01:02
Comment thread pkg/config/config.go
}, Grafeas: GrafeasConfig{
NoteHint: "This attestation note was generated by Tekton Chains",
},
Storage: StorageConfigs{

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This change is due to gofumt.

@khrm khrm changed the title [WIP]feat(reconciler): filter TaskRun/PipelineRun by spec.managedBy feat(reconciler): filter TaskRun/PipelineRun by spec.managedBy Aug 13, 2026
@tekton-robot tekton-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Aug 13, 2026
@khrm
khrm force-pushed the managed-by-filter branch 2 times, most recently from e302582 to 71ed838 Compare August 13, 2026 08:31
Skip signing runs managed by external controllers by filtering on the
spec.managedBy field at the informer level. Runs with nil, empty, or
"tekton.dev/pipeline" managedBy are always accepted. Additional values
can be allowed via the "filter.managed-by" key in chains-config.

Signed-off-by: Khurram Baig <khurram.baig@gmail.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Khurram Baig <kbaig@redhat.com>
@khrm
khrm force-pushed the managed-by-filter branch from 71ed838 to e017145 Compare August 13, 2026 09:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/feature Categorizes issue or PR as related to a new feature. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants