Tekton Trigger Architecture

Tekton Trigger Architecture An architecture diagram generated by Archify. GitHub Webhook · protected main push · Architecture component GitHub Webhook protected main push EventListener · webhook HTTP server · Tekton Triggers EventListener webhook HTTP server GitHub Interceptor · HMAC / push type · Tekton Triggers GitHub Interceptor HMAC / push type CEL Interceptor · repository / ref / SHA · Tekton Triggers CEL Interceptor repository / ref / SHA TriggerBinding · full commit SHA · Tekton Triggers TriggerBinding full commit SHA TriggerTemplate · fixed execution and roles · Tekton Triggers TriggerTemplate fixed execution and roles PipelineRun · pipeline execution starts · Tekton Pipelines PipelineRun pipeline execution starts HTTP POST validated filter passed params creates Tekton Triggers Tekton Pipelines Legend Backend Security External

Validate delivery

  • • GitHub HMAC and push eventTypes
  • • Check repository, branch, SHA and deletion state

Execution scope

  • • Keep Git URL, image and ServiceAccounts fixed
  • • Separate privileges and execution for external PRs