Skip to content

feat(reconciler): filter TaskRun/PipelineRun by spec.managedBy - #1882

Merged
tekton-robot merged 1 commit into
tektoncd:mainfrom
khrm:managed-by-filter
Aug 14, 2026
Merged

feat(reconciler): filter TaskRun/PipelineRun by spec.managedBy#1882
tekton-robot merged 1 commit into
tektoncd:mainfrom
khrm:managed-by-filter

Conversation

@khrm

@khrm khrm commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Skip signing runs managed by external controllers by filtering on the spec.managedBy field at the informer level. Runs with nil, empty, or "tekton.dev/pipeline" managedBy are always accepted. Additional values can be allowed via the "filter.managed-by" key in chains-config.

Changes

Submitter Checklist

As the author of this PR, please check off the items in this checklist:

  • Has Docs included if any changes are user facing
  • Has Tests included if any functionality added or changed
  • Follows the commit message standard
  • Meets the Tekton contributor standards (including
    functionality, content, code)
  • Release notes block below has been updated with any user facing changes (API changes, bug fixes, changes requiring upgrade notices or deprecation warnings)
  • Release notes contains the string "action required" if the change requires additional action from users switching to the new release

Release Notes

NONE

@tekton-robot tekton-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Aug 12, 2026
@tekton-robot tekton-robot added the size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. label Aug 12, 2026

@khrm khrm left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/kind feature

@tekton-robot tekton-robot added the kind/feature Categorizes issue or PR as related to a new feature. label Aug 12, 2026
@codecov

codecov Bot commented Aug 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 62.15%. Comparing base (38e04e2) to head (2a4777a).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1882      +/-   ##
==========================================
+ Coverage   62.10%   62.15%   +0.05%     
==========================================
  Files          64       64              
  Lines        4072     4088      +16     
==========================================
+ Hits         2529     2541      +12     
- Misses       1264     1266       +2     
- Partials      279      281       +2     
Flag Coverage Δ
unit-tests 62.15% <ø> (+0.05%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@khrm
khrm force-pushed the managed-by-filter branch 3 times, most recently from 3badbab to ab870dd Compare August 13, 2026 01:02
Comment thread pkg/config/config.go
}, Grafeas: GrafeasConfig{
NoteHint: "This attestation note was generated by Tekton Chains",
},
Storage: StorageConfigs{

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This change is due to gofumt.

@khrm khrm changed the title [WIP]feat(reconciler): filter TaskRun/PipelineRun by spec.managedBy feat(reconciler): filter TaskRun/PipelineRun by spec.managedBy Aug 13, 2026
@tekton-robot tekton-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Aug 13, 2026
@khrm
khrm force-pushed the managed-by-filter branch 3 times, most recently from 71ed838 to e017145 Compare August 13, 2026 09:16
Skip signing runs managed by external controllers by filtering on the
spec.managedBy field at the informer level. Runs with nil, empty, or
"tekton.dev/pipeline" managedBy are always accepted. Additional values
can be allowed via the "filter.managed-by" key in chains-config.

Signed-off-by: Khurram Baig <khurram.baig@gmail.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Khurram Baig <kbaig@redhat.com>
@khrm
khrm force-pushed the managed-by-filter branch from e017145 to 2a4777a Compare August 14, 2026 02:04
@jkhelil

jkhelil commented Aug 14, 2026

Copy link
Copy Markdown
Member

/approve

@tekton-robot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jkhelil

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 14, 2026

@khrm khrm left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@infernus01 Can you please review and merge this?

Comment thread pkg/reconciler/taskrun/controller.go
Comment thread pkg/reconciler/filter.go

@infernus01 infernus01 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Aug 14, 2026
@tekton-robot
tekton-robot merged commit 6ea7dec into tektoncd:main Aug 14, 2026
22 of 23 checks passed
@khrm
khrm deleted the managed-by-filter branch August 14, 2026 14:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. kind/feature Categorizes issue or PR as related to a new feature. lgtm Indicates that a PR is ready to be merged. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants