Tekton Controller Architecture

Tekton Controller Architecture An architecture diagram generated by Archify. User · kubectl / CI client · Architecture component User kubectl / CI client kube-apiserver · Kubernetes API · Kubernetes API kube-apiserver Kubernetes API etcd · Cluster state · Kubernetes API etcd Cluster state tekton-pipelines-controller · reconcile runs/Pods via API · Tekton control plane tekton-pipelines-controller reconcile runs/Pods via API tekton-pipelines-webhook · Admission + validation · Tekton control plane tekton-pipelines-webhook Admission + validation Remote resolvers · resolve remote definitions · Tekton control plane Remote resolvers resolve remote definitions TaskRun Pod 1 · Step containers + Sidecar · Tekton data plane TaskRun Pod 1 Step containers + Sidecar TaskRun Pod 2 · Step containers + Sidecar · Tekton data plane TaskRun Pod 2 Step containers + Sidecar PVC · per-run Workspace · Tekton data plane PVC per-run Workspace creates PipelineRun persists watches CRDs create via API admission response Remote resolution Shared Workspace Kubernetes API Tekton control plane Tekton data plane Legend Backend Database Security External

Controller and execution

  • • Reconcile executions after API admission
  • • Steps run sequentially within a TaskRun Pod
  • • Tasks in one execution can share its PVC
  • • Different trust levels must not share writable PVCs