WIP | Onboard Tekton Scheduler to operator

components.yaml

@@ -7,6 +7,9 @@ dashboard:
 hub:
   github: tektoncd/hub
   version: v1.23.5
+scheduler:
+  github: tektoncd-pb/tekton-kueue
+  version: v0.3.0
 manual-approval-gate:
   github: openshift-pipelines/manual-approval-gate
   version: v0.7.0

config/base/300-operator_v1alpha1_scheduler_crd.yaml

@@ -0,0 +1,51 @@
+# Copyright 2025 The Tekton Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: tektonschedulers.operator.tekton.dev
+  labels:
+    version: "devel"
+    operator.tekton.dev/release: "devel"
+spec:
+  group: operator.tekton.dev
+  names:
+    kind: TektonScheduler
+    listKind: TektonSchedulerList
+    plural: tektonschedulers
+    singular: tektonscheduler
+  preserveUnknownFields: false
+  scope: Cluster
+  versions:
+  - name: v1alpha1
+    served: true
+    storage: true
+    subresources:
+      status: {}
+    additionalPrinterColumns:
+      - jsonPath: .status.version
+        name: Version
+        type: string
+      - jsonPath: .status.conditions[?(@.type=="Ready")].status
+        name: Ready
+        type: string
+      - jsonPath: .status.conditions[?(@.type=="Ready")].message
+        name: Reason
+        type: string
+    schema:
+      openAPIV3Schema:
+        type: object
+        description: Schema for the tektonschedulers API
+        x-kubernetes-preserve-unknown-fields: true

config/base/kustomization.yaml

@@ -24,6 +24,7 @@ resources:
 - 300-operator_v1alpha1_hub_crd.yaml
 - 300-operator_v1alpha1_manualapprovalgate_crd.yaml
 - 300-operator_v1alpha1_pruner_crd.yaml
+- 300-operator_v1alpha1_scheduler_crd.yaml
 - config-logging.yaml
 - config-observability.yaml
 - tekton-config-defaults.yaml
@@ -38,3 +39,5 @@ resources:
 - config-leader-election.yaml
 - tekton_result_role.yaml
 - tekton_result_role_binding.yaml
+- tekton_scheduler_role.yaml
+- tekton_scheduler_role_binding.yaml

config/base/tekton_scheduler_role.yaml

@@ -0,0 +1,57 @@
+# Copyright 2025 The Tekton Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: tekton-scheduler-role
+rules:
+  - apiGroups:
+      - kueue.x-k8s.io
+    resources:
+      - resourceflavors
+      - workloads
+      - workloads/finalizers
+      - workloads/status
+      - workloadpriorityclasses
+    verbs:
+      - get
+      - list
+      - create
+      - update
+      - delete
+      - patch
+      - watch
+  - apiGroups:
+      - scheduling.k8s.io
+    resources:
+      - priorityclasses
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - cert-manager.io
+    resources:
+      - certificates
+      - issuers
+    verbs:
+      - get
+      - create
+      - update
+      - list
+  - nonResourceURLs:
+      - /metrics
+    verbs:
+      - get

config/base/tekton_scheduler_role_binding.yaml

@@ -0,0 +1,26 @@
+# Copyright 2025 The Tekton Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: tekton-scheduler-rolebinding
+subjects:
+  - kind: Group
+    apiGroup: rbac.authorization.k8s.io
+    name: 'system:authenticated'
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: tekton-scheduler-role

config/crs/kubernetes/kustomization.yaml

@@ -11,3 +11,4 @@ resources:
 - hub/operator_v1alpha1_hub_cr.yaml
 - manualapprovalgate/operator_v1alpha1_manualapprovalgate_cr.yaml
 - pruner/operator_v1alpha1_pruner_cr.yaml
+- scheduler/operator_v1alpha1_scheduler_cr.yaml

config/crs/kubernetes/scheduler/operator_v1alpha1_scheduler_cr.yaml

@@ -0,0 +1,22 @@
+# Copyright 2025 The Tekton Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+apiVersion: operator.tekton.dev/v1alpha1
+kind: TektonScheduler
+metadata:
+  name: tektonscheduler
+spec:
+  targetNamespace: tekton-pipelines
+  disabled: false
+  multi-cluster: {}

config/kubernetes/base/operator.yaml

@@ -33,7 +33,7 @@ spec:
         image: ko://github.com/tektoncd/operator/cmd/kubernetes/operator
         args:
         - "-controllers"
-        - "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner"
+        - "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner,tektonscheduler"
         - "-unique-process-name"
         - "tekton-operator-lifecycle"
         imagePullPolicy: IfNotPresent

config/openshift/base/operator.yaml

@@ -38,7 +38,7 @@ spec:
         image: ko://github.com/tektoncd/operator/cmd/openshift/operator
         args:
         - "-controllers"
-        - "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonaddon,tektonresult,openshiftpipelinesascode,manualapprovalgate,tektonpruner"
+        - "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonaddon,tektonresult,openshiftpipelinesascode,manualapprovalgate,tektonpruner,tektonscheduler"
         - "-unique-process-name"
         - "tekton-operator-lifecycle"
         imagePullPolicy: Always

docs/AirGapImageConfiguration.md

@@ -66,37 +66,39 @@ kubectl delete tektoninstallerset <installer-set-name>
 
 #### Images supported in kubernetes
 
-| Component            | Container/Args name               | Environment Variable                               |
-|----------------------|-----------------------------------|----------------------------------------------------|
-| Chains               | tekton-chains-controller          | `IMAGE_CHAINS_TEKTON_CHAINS_CONTROLLER`            |
-| Dashboard            | tekton-dashboard                  | `IMAGE_DASHBOARD_TEKTON_DASHBOARD`                 |
-| Hub                  | tekton-hub-api                    | `IMAGE_HUB_TEKTON_HUB_API`                         |
-| Hub                  | tekton-hub-db                     | `IMAGE_HUB_TEKTON_HUB_DB`                          |
-| Hub                  | tekton-hub-db-migration           | `IMAGE_HUB_TEKTON_HUB_DB_MIGRATION`                |
-| Hub                  | tekton-hub-ui                     | `IMAGE_HUB_TEKTON_HUB_UI`                          |
-| Manual Approval Gate | manual-approval                   | `IMAGE_MAG_MANUAL_APPROVAL`                        |
-| Manual Approval Gate | tekton-taskgroup-controller       | `IMAGE_MAG_TEKTON_TASKGROUP_CONTROLLER`            |
-| Pipeline             | arg:entrypoint-image              | `IMAGE_PIPELINES_ARG__ENTRYPOINT_IMAGE`            |
-| Pipeline             | arg:git-image                     | `IMAGE_PIPELINES_ARG__GIT_IMAGE`                   |
-| Pipeline             | arg:nop-image                     | `IMAGE_PIPELINES_ARG__NOP_IMAGE`                   |
-| Pipeline             | arg:shell-image                   | `IMAGE_PIPELINES_ARG__SHELL_IMAGE`                 |
-| Pipeline             | arg:shell-image-win               | `IMAGE_PIPELINES_ARG__SHELL_IMAGE_WIN`             |
-| Pipeline             | arg:workingdirinit-image          | `IMAGE_PIPELINES_ARG__WORKINGDIRINIT_IMAGE`        |
-| Pipeline             | controller (resolvers controller) | `IMAGE_PIPELINES_CONTROLLER`                       |
-| Pipeline             | tekton-events-controller          | `IMAGE_PIPELINES_TEKTON_EVENTS_CONTROLLER`         |
-| Pipeline             | tekton-pipelines-controller       | `IMAGE_PIPELINES_TEKTON_PIPELINES_CONTROLLER`      |
-| Pipeline             | webhook                           | `IMAGE_PIPELINES_WEBHOOK`                          |
-| Results              | api                               | `IMAGE_RESULTS_API`                                |
-| Results              | postgres                          | `IMAGE_RESULTS_POSTGRES`                           |
-| Results              | watcher                           | `IMAGE_RESULTS_WATCHER`                            |
-| Triggers             | arg:el-image                      | `IMAGE_TRIGGERS_ARG__EL_IMAGE`                     |
-| Triggers             | tekton-triggers-controller        | `IMAGE_TRIGGERS_TEKTON_TRIGGERS_CONTROLLER`        |
-| Triggers             | tekton-triggers-core-interceptors | `IMAGE_TRIGGERS_TEKTON_TRIGGERS_CORE_INTERCEPTORS` |
-| Triggers             | webhook                           | `IMAGE_TRIGGERS_WEBHOOK`                           |
-| Pipelines Proxy      | webhook Proxy image               | `IMAGE_PIPELINES_PROXY`                            |
-| Pruner CronJob       | image used in pruner cronJob      | `IMAGE_JOB_PRUNER_TKN`                             |
-| Tekton Pruner        | image used by pruner controller   | `IMAGE_PRUNER_CONTROLLER`                          |
-| Tekton Pruner        | image used by pruner webhook      | `IMAGE_PRUNER_WEBHOOK`                             |
+| Component            | Container/Args name                | Environment Variable                               |
+|----------------------|------------------------------------|----------------------------------------------------|
+| Chains               | tekton-chains-controller           | `IMAGE_CHAINS_TEKTON_CHAINS_CONTROLLER`            |
+| Dashboard            | tekton-dashboard                   | `IMAGE_DASHBOARD_TEKTON_DASHBOARD`                 |
+| Hub                  | tekton-hub-api                     | `IMAGE_HUB_TEKTON_HUB_API`                         |
+| Hub                  | tekton-hub-db                      | `IMAGE_HUB_TEKTON_HUB_DB`                          |
+| Hub                  | tekton-hub-db-migration            | `IMAGE_HUB_TEKTON_HUB_DB_MIGRATION`                |
+| Hub                  | tekton-hub-ui                      | `IMAGE_HUB_TEKTON_HUB_UI`                          |
+| Manual Approval Gate | manual-approval                    | `IMAGE_MAG_MANUAL_APPROVAL`                        |
+| Manual Approval Gate | tekton-taskgroup-controller        | `IMAGE_MAG_TEKTON_TASKGROUP_CONTROLLER`            |
+| Pipeline             | arg:entrypoint-image               | `IMAGE_PIPELINES_ARG__ENTRYPOINT_IMAGE`            |
+| Pipeline             | arg:git-image                      | `IMAGE_PIPELINES_ARG__GIT_IMAGE`                   |
+| Pipeline             | arg:nop-image                      | `IMAGE_PIPELINES_ARG__NOP_IMAGE`                   |
+| Pipeline             | arg:shell-image                    | `IMAGE_PIPELINES_ARG__SHELL_IMAGE`                 |
+| Pipeline             | arg:shell-image-win                | `IMAGE_PIPELINES_ARG__SHELL_IMAGE_WIN`             |
+| Pipeline             | arg:workingdirinit-image           | `IMAGE_PIPELINES_ARG__WORKINGDIRINIT_IMAGE`        |
+| Pipeline             | controller (resolvers controller)  | `IMAGE_PIPELINES_CONTROLLER`                       |
+| Pipeline             | tekton-events-controller           | `IMAGE_PIPELINES_TEKTON_EVENTS_CONTROLLER`         |
+| Pipeline             | tekton-pipelines-controller        | `IMAGE_PIPELINES_TEKTON_PIPELINES_CONTROLLER`      |
+| Pipeline             | webhook                            | `IMAGE_PIPELINES_WEBHOOK`                          |
+| Results              | api                                | `IMAGE_RESULTS_API`                                |
+| Results              | postgres                           | `IMAGE_RESULTS_POSTGRES`                           |
+| Results              | watcher                            | `IMAGE_RESULTS_WATCHER`                            |
+| Triggers             | arg:el-image                       | `IMAGE_TRIGGERS_ARG__EL_IMAGE`                     |
+| Triggers             | tekton-triggers-controller         | `IMAGE_TRIGGERS_TEKTON_TRIGGERS_CONTROLLER`        |
+| Triggers             | tekton-triggers-core-interceptors  | `IMAGE_TRIGGERS_TEKTON_TRIGGERS_CORE_INTERCEPTORS` |
+| Triggers             | webhook                            | `IMAGE_TRIGGERS_WEBHOOK`                           |
+| Pipelines Proxy      | webhook Proxy image                | `IMAGE_PIPELINES_PROXY`                            |
+| Pruner CronJob       | image used in pruner cronJob       | `IMAGE_JOB_PRUNER_TKN`                             |
+| Tekton Pruner        | image used by pruner controller    | `IMAGE_PRUNER_CONTROLLER`                          |
+| Tekton Pruner        | image used by pruner webhook       | `IMAGE_PRUNER_WEBHOOK`                             |
+| Tekton Scheduler     | image used by scheduler controller | `IMAGE_SCHEDULER_WEBHOOK`                          |
+| Tekton Scheduler     | image used by pruner webhook       | `IMAGE_SCHEDULER_WEBHOOK`                             |
 
 
 #### Images supported in OpenShift