RHEA-2024:7870 - Product Enhancement Advisory

Topic

Red Hat OpenShift Pipelines 1.16.0 has been released.

Description

Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery (CI/CD) solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments across multiple platforms such as Kubernetes, Serverless, and VMs by abstracting away the underlying details.

Red Hat OpenShift Pipelines consists of:

• Tekton Operator 0.73.x
• Tekton Pipelines 0.62.x
• Tekton Triggers 0.29.x
• Tekton tkn CLI 0.38.x
• Tekton Chains 0.22.x (GA)
• Pipelines-as-Code 0.28.x (GA)
• ClusterTasks based on Tekton Catalog
• Tekton Hub 1.18.x (TP)
• Tekton Result 0.11.x (TP)
• Manual-Approval-Gate 0.3.x (TP)

## Features

• Standard CI/CD pipelines definition
• Easy to extend and integrate with existing tools
• Portable across any Kubernetes platform
• Designed for microservices and decentralized teams
• Integrated with OpenShift Developer Console
• Build images with Kubernetes tools such as S2I, Buildah, Buildpacks, Kaniko, etc.
• Deploy applications to multiple platforms such as Kubernetes, Serverless, and VMs
• Scale pipelines on-demand
• Enhance supply chain security with Tekton Chains (Technology Preview)
• Install and deploy Tekton Hub (Technology Preview) with custom catalog on enterprise cluster
• Maintain pipelines definitions as parts of an application repository with Pipelines-as-Code (PAC) (General Availability)

For more information, see the Release Notes on any one of the following platforms:

• Customer Portal: https://access.redhat.com/documentation/en-us/red_hat_openshift_pipelines/1.14/html/about_openshift_pipelines/op-release-notes#op-release-notes-1-14_op-release-notes
• OpenShift documentation: https://docs.openshift.com/pipelines/1.14/about/op-release-notes.html#op-release-notes-1-14_op-release-notes

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Pipelines 1.16 x86_64
• Red Hat OpenShift Pipelines for IBM Power, little endian 1.16 ppc64le
• Red Hat OpenShift Pipelines for IBM Z and LinuxONE 1.16 s390x
• Red Hat OpenShift Pipelines for ARM 1.16 aarch64

Fixes

• SRVKP-3933 - Release OpenShift Pipelines Operator for Pipelines 1.16.0

CVEs

• CVE-2023-37920
• CVE-2024-1737
• CVE-2024-1975
• CVE-2024-2398
• CVE-2024-4032
• CVE-2024-6232
• CVE-2024-6345
• CVE-2024-6923
• CVE-2024-28863
• CVE-2024-29041
• CVE-2024-29180
• CVE-2024-30203
• CVE-2024-30205
• CVE-2024-34156
• CVE-2024-37370
• CVE-2024-37371
• CVE-2024-37891
• CVE-2024-39331
• CVE-2024-39338
• CVE-2024-45490
• CVE-2024-45491
• CVE-2024-45492

References

• https://docs.openshift.com/container-platform/4.14/cicd/pipelines/understanding-openshift-pipelines.html