CHANGELOG.md

v1.9.2 Release 2023-03-27

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.9.2
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.9.2-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.9.2-slim

• fix(executor): make pax tar builds reproducible again #2384
• Upgrade docker #2440
• Update ACR credential helper to enable Azure Workload Identity #2431
• bump cosign version used to sign images #2437
• Fix Integration tests #2425
• chore(deps): bump golang from 1.17 to 1.19 in /deploy #2328
• chore: fix typo #2316
• ci: don't cache certs stage #2296
• fix(executor): make pax tar builds reproducible again #2384
• Upgrade docker #2440
• Update ACR credential helper to enable Azure Workload Identity #2431
• bump cosign version used to sign images #2437
• Fix Integration tests #2425
• chore(deps): bump golang from 1.17 to 1.19 in /deploy #2328
• chore: fix typo #2316
• ci: don't cache certs stage #2296
• chore: fix typo #2289
• fix(WORKDIR): use the config.User for the new dir permissions #2269
• Provide --cache-repo as OCI image layout path #2250 Huge thank you for this release towards our contributors:

• Aaruni Aggarwal
• Abirdcfly
• Adrian Newby
• almg80
• Anbraten
• Andreas Fleig
• Andrei Kvapil
• ankitm123
• Aris Buzachis
• Benjamin Krenn
• Bernardo Marques
• Bryan A. S
• chenggui53
• Chuang Wang
• claudex
• Dávid Szakállas
• Dawei Ma
• dependabot[bot]
• Diego Gonzalez
• dmr
• ejose19
• Eng Zer Jun
• ePirat
• Florian Apolloner
• François JACQUES
• Gabriel Nützi
• Gilbert Gilb's
• Guillaume Calmettes
• Herman
• Hingbong Lo
• Igor Scheller
• Ishant Mrinal Haloi
• Jack
• Jake Sanders
• Janosch Maier
• Jason D'Amour
• Jason Hall
• Jasper Ben Orschulko
• Jerry Jones
• jeunii
• Joe Kimmel
• Joël Pepper
• Jonas Gröger
• Jose Donizetti
• Junwon Kwon
• Kamal Nasser
• Konstantin Demin
• Kun Lu
• Lars Seipel
• Liwen Guo
• Lukas
• Matt Moore
• Max Walther
• Mikhail Vasin
• Natalie Arellano
• Naveen
• nihilo
• Oliver Gregorius
• Pat Litke
• Patrick Barker
• priyawadhwa
• Ramy
• Rhianna
• Sebastiaan Tammer
• Shude Li
• Sigurd Spieckermann
• Silvano Cirujano Cuesta
• Tejal Desai
• Tony De La Nuez
• Travis DePrato
• Viacheslav Artamonov
• Víctor
• Wolfgang Walther
• wwade
• Yahav Itzhak
• ygelfand
• Yonatan Koren
• zhouhaibing089

v1.9.1 Release 2022-09-26

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.9.1
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.9.1-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.9.1-slim

• (fix):Pass full URI path to bucket.GetNameAndFilepathFromURI #2221
• Add the ability to skip unpacking the initial file system #2234
• chore: remove duplicate word in comments #2232
• docs(CHANGELOG.md): fix link to issue #2040 #2228
• feat: disable cache-copy-layers in multistage builds; closes 2065 #2227
• bump cosign version so it can sign #2224
• fix(README.md): remove duplicate caching section #2223
• refactor: Make CLI argument names consistent #2084
• fix(KanikoDir): update DOCKER_CONFIG env when use custom kanikoDir #2202
• (fix):Pass full URI path to bucket.GetNameAndFilepathFromURI #2221
• Add the ability to skip unpacking the initial file system #2234
• chore: remove duplicate word in comments #2232
• docs(CHANGELOG.md): fix link to issue #2040 #2228
• feat: disable cache-copy-layers in multistage builds; closes 2065 #2227
• bump cosign version so it can sign #2224
• fix(README.md): remove duplicate caching section #2223
• refactor: Make CLI argument names consistent #2084
• fix(KanikoDir): update DOCKER_CONFIG env when use custom kanikoDir #2202 Huge thank you for this release towards our contributors:

• Aaruni Aggarwal
• Abirdcfly
• Adrian Newby
• almg80
• Anbraten
• Andreas Fleig
• Andrei Kvapil
• ankitm123
• Benjamin Krenn
• Bernardo Marques
• Bryan A. S
• chenggui53
• Chuang Wang
• claudex
• Dávid Szakállas
• Dawei Ma
• dependabot[bot]
• Diego Gonzalez
• dmr
• ejose19
• Eng Zer Jun
• ePirat
• Florian Apolloner
• François JACQUES
• Gabriel Nützi
• Gilbert Gilb's
• Guillaume Calmettes
• Herman
• Hingbong Lo
• Igor Scheller
• Ishant Mrinal Haloi
• Jack
• Jake Sanders
• Janosch Maier
• Jason D'Amour
• Jason Hall
• Jasper Ben Orschulko
• jeunii
• Jonas Gröger
• Jose Donizetti
• Kamal Nasser
• Konstantin Demin
• Kun Lu
• Lars Seipel
• Liwen Guo
• Lukas
• Matt Moore
• Max Walther
• Mikhail Vasin
• Natalie Arellano
• Naveen
• nihilo
• Oliver Gregorius
• Pat Litke
• Patrick Barker
• priyawadhwa
• Ramy
• Rhianna
• Sebastiaan Tammer
• Sigurd Spieckermann
• Silvano Cirujano Cuesta
• Tejal Desai
• Tony De La Nuez
• Travis DePrato
• Víctor
• Wolfgang Walther
• wwade
• Yahav Itzhak
• ygelfand
• Yonatan Koren
• zhouhaibing089

v1.9.0 Release 2022-08-09

Highlights

• Installed binaries are missing from image #2049
• proc: detect kubernetes runtime by mounts #2054
• Fixes #2046: make target stage lookup case insensitive #2047
• fix: Refactor LayersMap to correct old strange code behavior #2066
• Fix missing setuid flags on COPY --from=build operation #2089
• Fixes #2046: make target stage lookup case insensitive #2047
• Add GitLab CI credentials helper #2040
• and a number of dependency bumps

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.9.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.9.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.9.0-slim

• add cache option for run command #2032
• fix: kaniko dir env unused #2067
• fix: getUIDandGID is able to resolve non-existing users and groups #2106
• fix(Dockerfile): use temporary busybox mount to create /kaniko directory #2155
• Fix the /kaniko directory permissions in container #2009
• ci(setup-minikube): use cri-dockerd #2149
• CA certificates tasks in kaniko images #2142
• refactor: simpler local integration tests #2110
• fix: use refrence should after err handles #2128
• fix: Add test for issue #2049 #2114
• Bump ossf/scorecard-action from 1.0.4 to 1.1.1 #2116
• Bump github.com/aws/aws-sdk-go from 1.43.36 to 1.44.24 #2111
• Bump actions/setup-go from 3.0.0 to 3.2.0 #2112
• Write parent directories to tar before whiteout files #2113
• fix(ci): Docker build for issue 1837 #2095
• Update Azure credHelpers docs #2109
• Fix missing setuid flags on COPY --from=build operation #2089
• fix: COPY --chown regression tests #2097
• fix: Regression test for #2066 #2096
• fix: Refactor LayersMap to correct old strange code behavior #2066
• fix: Main #2094
• feat: add flag to disable pushing cache #2038
• hasher: hash security.capability attributes #1994
• Documentation: Clarify README.md blurb on --cache-copy-layers #2064
• Fix release tagging workflow #2034
• Bump docker/setup-buildx-action from 1.6.0 to 2 #2081
• Bump go-containerregistry dependency #2076
• Fix: Flatten layer function needs to return existing files in the layer correctly #2057
• fix: Remove hardcoded whiteout prefix #2056
• proc: detect kubernetes runtime by mounts #2054
• Fixes #2046: make target stage lookup case insensitive #2047
• Add GitLab CI credentials helper #2040
• Bump sigstore/cosign-installer from b4f55743d10d066fee1de1cf0fa26069700c0195 to 2.2.0 #2044
• Bump github/codeql-action from 2.1.6 to 2.1.8 #2043
• Bump github.com/aws/aws-sdk-go from 1.43.31 to 1.43.36 #2042
• Bump cloud.google.com/go/storage from 1.21.0 to 1.22.0 #2041
• add cache option for run command #2032
• fix: kaniko dir env unused #2067
• fix: getUIDandGID is able to resolve non-existing users and groups #2106
• fix(Dockerfile): use temporary busybox mount to create /kaniko directory #2155
• Fix the /kaniko directory permissions in container #2009
• ci(setup-minikube): use cri-dockerd #2149
• CA certificates tasks in kaniko images #2142
• refactor: simpler local integration tests #2110
• fix: use refrence should after err handles #2128
• fix: Add test for issue #2049 #2114
• Bump ossf/scorecard-action from 1.0.4 to 1.1.1 #2116
• Bump github.com/aws/aws-sdk-go from 1.43.36 to 1.44.24 #2111
• Bump actions/setup-go from 3.0.0 to 3.2.0 #2112
• Write parent directories to tar before whiteout files #2113
• fix(ci): Docker build for issue 1837 #2095
• Update Azure credHelpers docs #2109
• Fix missing setuid flags on COPY --from=build operation #2089
• fix: COPY --chown regression tests #2097
• fix: Regression test for #2066 #2096
• fix: Refactor LayersMap to correct old strange code behavior #2066
• fix: Main #2094
• feat: add flag to disable pushing cache #2038
• hasher: hash security.capability attributes #1994
• Documentation: Clarify README.md blurb on --cache-copy-layers #2064
• Fix release tagging workflow #2034
• Bump docker/setup-buildx-action from 1.6.0 to 2 #2081
• Bump go-containerregistry dependency #2076
• Fix: Flatten layer function needs to return existing files in the layer correctly #2057
• fix: Remove hardcoded whiteout prefix #2056
• proc: detect kubernetes runtime by mounts #2054
• Fixes #2046: make target stage lookup case insensitive #2047
• Add GitLab CI credentials helper #2040
• Bump sigstore/cosign-installer from b4f55743d10d066fee1de1cf0fa26069700c0195 to 2.2.0 #2044
• Bump github/codeql-action from 2.1.6 to 2.1.8 #2043
• Bump github.com/aws/aws-sdk-go from 1.43.31 to 1.43.36 #2042
• Bump cloud.google.com/go/storage from 1.21.0 to 1.22.0 #2041 Huge thank you for this release towards our contributors:

• Aaruni Aggarwal
• Adrian Newby
• Anbraten
• Andreas Fleig
• Andrei Kvapil
• ankitm123
• Benjamin Krenn
• Bernardo Marques
• Chuang Wang
• claudex
• Dávid Szakállas
• Dawei Ma
• dependabot[bot]
• Diego Gonzalez
• ejose19
• Eng Zer Jun
• ePirat
• Florian Apolloner
• François JACQUES
• Gabriel Nützi
• Gilbert Gilb's
• Guillaume Calmettes
• Herman
• Hingbong Lo
• Igor Scheller
• Ishant Mrinal Haloi
• Jack
• Jake Sanders
• Janosch Maier
• Jason D'Amour
• Jason Hall
• Jasper Ben Orschulko
• jeunii
• Jose Donizetti
• Kamal Nasser
• Konstantin Demin
• Kun Lu
• Lars Seipel
• Liwen Guo
• Lukas
• Matt Moore
• Max Walther
• Mikhail Vasin
• Naveen
• nihilo
• Oliver Gregorius
• Pat Litke
• Patrick Barker
• priyawadhwa
• Ramy
• Rhianna
• Sebastiaan Tammer
• Sigurd Spieckermann
• Silvano Cirujano Cuesta
• Tejal Desai
• Tony De La Nuez
• Travis DePrato
• Víctor
• Wolfgang Walther
• wwade
• Yahav Itzhak
• ygelfand
• Yonatan Koren
• zhouhaibing089

v1.8.1 Release 2022-04-01

This is Apr's 2022 release.

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.8.1
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.8.1-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.8.1-slim

• Use canonical platform values. Fix 1995. #2025
• feat: kaniko dir config option #1997
• Bump github.com/aws/aws-sdk-go from 1.43.17 to 1.43.26 #2018
• Bump github.com/containerd/containerd from 1.6.1 to 1.6.2 #2017
• Bump github.com/docker/docker from 20.10.13+incompatible to 20.10.14+incompatible #2016
• README.md: Update docs on building for AWS ECR #2020
• Move and fix GetContainerRuntime check from bpfd proc #1996
• Fix minor glitch in the SVG logos #2004
• Add SVG logos #2002
• Bump github/codeql-action from 1.1.3 to 1.1.5 #2000
• Fix - Incomplete regular expression for hostnames #1993
• Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 #1985
• Bump github.com/aws/aws-sdk-go from 1.43.12 to 1.43.17 #1986
• Bump github.com/spf13/afero from 1.8.1 to 1.8.2 #1987
• Bump github.com/docker/docker from 20.10.12+incompatible to 20.10.13+incompatible #1988
• Fix image tags in release workflow #1977
• Use canonical platform values. Fix 1995. #2025
• feat: kaniko dir config option #1997
• Bump github.com/aws/aws-sdk-go from 1.43.17 to 1.43.26 #2018
• Bump github.com/containerd/containerd from 1.6.1 to 1.6.2 #2017
• Bump github.com/docker/docker from 20.10.13+incompatible to 20.10.14+incompatible #2016
• README.md: Update docs on building for AWS ECR #2020
• Move and fix GetContainerRuntime check from bpfd proc #1996
• Fix minor glitch in the SVG logos #2004
• Add SVG logos #2002
• Bump github/codeql-action from 1.1.3 to 1.1.5 #2000
• Fix - Incomplete regular expression for hostnames #1993
• Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 #1985
• Bump github.com/aws/aws-sdk-go from 1.43.12 to 1.43.17 #1986
• Bump github.com/spf13/afero from 1.8.1 to 1.8.2 #1987
• Bump github.com/docker/docker from 20.10.12+incompatible to 20.10.13+incompatible #1988
• Fix image tags in release workflow #1977 Huge thank you for this release towards our contributors:

• Aaruni Aggarwal
• Adrian Newby
• Anbraten
• Andrei Kvapil
• ankitm123
• Benjamin Krenn
• Bernardo Marques
• Chuang Wang
• Dávid Szakállas
• Dawei Ma
• dependabot[bot]
• Diego Gonzalez
• ejose19
• Eng Zer Jun
• Florian Apolloner
• François JACQUES
• Gabriel Nützi
• Gilbert Gilb's
• Guillaume Calmettes
• Herman
• Igor Scheller
• Jack
• Jake Sanders
• Janosch Maier
• Jason Hall
• Jasper Ben Orschulko
• jeunii
• Jose Donizetti
• Kamal Nasser
• Kun Lu
• Lars Seipel
• Liwen Guo
• Matt Moore
• Max Walther
• Mikhail Vasin
• Naveen
• nihilo
• Oliver Gregorius
• Pat Litke
• Patrick Barker
• priyawadhwa
• Rhianna
• Sebastiaan Tammer
• Sigurd Spieckermann
• Silvano Cirujano Cuesta
• Tejal Desai
• Travis DePrato
• Wolfgang Walther
• wwade
• Yahav Itzhak
• ygelfand

v1.8.0 Release 2022-03-08

This is Mar's 2022 release.

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.8.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.8.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.8.0-slim

• Update dependabot settings to get updates for docker #1969
• Bump actions/setup-go from 2.2.0 to 3 #1970
• Bump google-github-actions/setup-gcloud from 0.5.0 to 0.5.1 #1950
• Pinned GitHub actions by SHA #1963
• Bump actions/upload-artifact from 2.3.1 to 3 #1968
• Bump actions/checkout from 2 to 3 #1967
• Bump github.com/aws/aws-sdk-go from 1.42.52 to 1.43.12 #1966
• Bump github.com/containerd/containerd from 1.6.0 to 1.6.1 #1961
• Fix bug with log disabling #1959
• Bump github/codeql-action from 1.1.2 to 1.1.3 #1958
• Bump github.com/aws/aws-sdk-go from 1.42.52 to 1.43.7 #1957
• Removed --whitelist-var-run normalization as this breaks functionality #1956
• Bump github.com/containerd/containerd from 1.5.9 to 1.6.0 #1948
• Bump cloud.google.com/go/storage from 1.20.0 to 1.21.0 #1947
• Bump github/codeql-action from 1.1.0 to 1.1.2 #1951
• Bump ossf/scorecard-action from 1.0.3 to 1.0.4 #1952
• Bump ecr-login dep to avoid some log spam #1946
• readme: Fix formatting for --image-fs-extract-retry #1942
• Pick up per-repository auth changes from go-containerregistry #1939
• Bump github.com/aws/aws-sdk-go from 1.42.47 to 1.42.52 #1937
• Bump github/codeql-action from 1.0.31 to 1.1.0 #1938
• Set DOCKER_BUILDKIT=1 in make images #1906
• Fix resolving arguments over multi-stage build #1928
• Correctly handle platforms that include CPU variants #1929
• Restore build args after optimize. Fixes #1910, #1912. #1915
• test: use T.TempDir to create temporary test directory #1918
• Bump github.com/spf13/afero from 1.8.0 to 1.8.1 #1922
• Bump github.com/aws/aws-sdk-go from 1.42.44 to 1.42.47 #1923
• Bump cloud.google.com/go/storage from 1.19.0 to 1.20.0 #1924
• Bump ossf/scorecard-action from 1.0.2 to 1.0.3 #1926
• Bump google-github-actions/setup-gcloud from 0.4.0 to 0.5.0 #1925
• Bump github/codeql-action from 1.0.30 to 1.0.31 #1927
• Vagrantfile should install and configure go (see #1913) #1914
• adding ppc64le support for executor and warmer image #1908
• Remove deploy/cloudbuild-*.yaml files #1907
• Bump go-containerregistry to pick up ACR fix #1898
• Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 #1903
• Bump github.com/aws/aws-sdk-go from 1.42.38 to 1.42.44 #1902
• Bump ossf/scorecard-action from 5da1b6b2680a229f2e66131f5c6a692bcd80b246 to 1.0.2 #1899
• Bump google-github-actions/setup-gcloud from 0.3.0 to 0.4.0 #1900
• Bump github/codeql-action from 1.0.26 to 1.0.30 #1901
• Enable dependabot for Go and GitHub Actions dependencies #1884
• Update readme #1897
• Remove k8schain, directly depend on cred helpers #1891
• Update golang.org/x/oauth2/google #1890
• Bump dependencies #1885
• Fix broken anchor link #1804
• Bump github.com/docker/docker to latest release #1866
• Run GitHub Actions on pushes and PRs to main, not master #1883
• Add KANIKO_REGISTRY_MIRROR env var #1875
• Bump AWS ecr-login cred helper to v0.5.0 #1880
• Pin to more recent version of scorecard #1878
• Add ossf/scorecard Github Action to kaniko #1874
• Attempt to fix erroneous build cancellation #1867
• Add s390x support to docker images #1749
• fix: ARG/ENV used in script does not invalidate build cache (#1688) #1693
• fix: change the name of the acr cred helper #1865
• Fix implicit GCR auth #1856
• Log full image ref by digest when pushing an image #1857
• Remove GitHub Actions concurrency limits #1858
• tar: read directly from stdin #1728
• Fix regression: can fetch branches and tags references without specifying commit hashes for private git repository used as context #1823
• Use pax tar format #1809
• Fix calculating path for copying ownership #1859
• Fix copying ownership #1725
• Fix typo #1825
• Fix possible nil pointer derefence in fs_util.go #1813
• include auth for FetchOptions #1796
• Update readme insecure flags #1811
• Add documentation on pushing to ACR #1831
• Fixes #1837 : keep file capabilities on archival #1838
• Use setup-gcloud@v0.3.0 instead of @master #1854
• Collapse integration test workflows into one config #1855
• Share the Go build cache when building in Dockerfiles #1853
• Call cosign sign --key #1849
• Consolidate PR and real release workflows #1845
• Use golang:1.17 and build from reproducible source #1848
• Start keyless signing kaniko releases #1841
• Attempt to speed up PR image builds by sharing a cache #1844
• Sign digests not tags. #1840
• Fix the e2e K8s test #1842
• Bump the cosign version (a lot) #1839
• Revert "Support mirror registries with path component (#1707)" #1794
• Fix syntax error in release.yaml #1800
• Update dependabot settings to get updates for docker #1969
• Bump actions/setup-go from 2.2.0 to 3 #1970
• Bump google-github-actions/setup-gcloud from 0.5.0 to 0.5.1 #1950
• Pinned GitHub actions by SHA #1963
• Bump actions/upload-artifact from 2.3.1 to 3 #1968
• Bump actions/checkout from 2 to 3 #1967
• Bump github.com/aws/aws-sdk-go from 1.42.52 to 1.43.12 #1966
• Bump github.com/containerd/containerd from 1.6.0 to 1.6.1 #1961
• Fix bug with log disabling #1959
• Bump github/codeql-action from 1.1.2 to 1.1.3 #1958
• Bump github.com/aws/aws-sdk-go from 1.42.52 to 1.43.7 #1957
• Removed --whitelist-var-run normalization as this breaks functionality #1956
• Bump github.com/containerd/containerd from 1.5.9 to 1.6.0 #1948
• Bump cloud.google.com/go/storage from 1.20.0 to 1.21.0 #1947
• Bump github/codeql-action from 1.1.0 to 1.1.2 #1951
• Bump ossf/scorecard-action from 1.0.3 to 1.0.4 #1952
• Bump ecr-login dep to avoid some log spam #1946
• readme: Fix formatting for --image-fs-extract-retry #1942
• Pick up per-repository auth changes from go-containerregistry #1939
• Bump github.com/aws/aws-sdk-go from 1.42.47 to 1.42.52 #1937
• Bump github/codeql-action from 1.0.31 to 1.1.0 #1938
• Set DOCKER_BUILDKIT=1 in make images #1906
• Fix resolving arguments over multi-stage build #1928
• Correctly handle platforms that include CPU variants #1929
• Restore build args after optimize. Fixes #1910, #1912. #1915
• test: use T.TempDir to create temporary test directory #1918
• Bump github.com/spf13/afero from 1.8.0 to 1.8.1 #1922
• Bump github.com/aws/aws-sdk-go from 1.42.44 to 1.42.47 #1923
• Bump cloud.google.com/go/storage from 1.19.0 to 1.20.0 #1924
• Bump ossf/scorecard-action from 1.0.2 to 1.0.3 #1926
• Bump google-github-actions/setup-gcloud from 0.4.0 to 0.5.0 #1925
• Bump github/codeql-action from 1.0.30 to 1.0.31 #1927
• Vagrantfile should install and configure go (see #1913) #1914
• adding ppc64le support for executor and warmer image #1908
• Remove deploy/cloudbuild-*.yaml files #1907
• Bump go-containerregistry to pick up ACR fix #1898
• Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 #1903
• Bump github.com/aws/aws-sdk-go from 1.42.38 to 1.42.44 #1902
• Bump ossf/scorecard-action from 5da1b6b2680a229f2e66131f5c6a692bcd80b246 to 1.0.2 #1899
• Bump google-github-actions/setup-gcloud from 0.3.0 to 0.4.0 #1900
• Bump github/codeql-action from 1.0.26 to 1.0.30 #1901
• Enable dependabot for Go and GitHub Actions dependencies #1884
• Update readme #1897
• Remove k8schain, directly depend on cred helpers #1891
• Update golang.org/x/oauth2/google #1890
• Bump dependencies #1885
• Fix broken anchor link #1804
• Bump github.com/docker/docker to latest release #1866
• Run GitHub Actions on pushes and PRs to main, not master #1883
• Add KANIKO_REGISTRY_MIRROR env var #1875
• Bump AWS ecr-login cred helper to v0.5.0 #1880
• Pin to more recent version of scorecard #1878
• Add ossf/scorecard Github Action to kaniko #1874
• Attempt to fix erroneous build cancellation #1867
• Add s390x support to docker images #1749
• fix: ARG/ENV used in script does not invalidate build cache (#1688) #1693
• fix: change the name of the acr cred helper #1865
• Fix implicit GCR auth #1856
• Log full image ref by digest when pushing an image #1857
• Remove GitHub Actions concurrency limits #1858
• tar: read directly from stdin #1728
• Fix regression: can fetch branches and tags references without specifying commit hashes for private git repository used as context #1823
• Use pax tar format #1809
• Fix calculating path for copying ownership #1859
• Fix copying ownership #1725
• Fix typo #1825
• Fix possible nil pointer derefence in fs_util.go #1813
• include auth for FetchOptions #1796
• Update readme insecure flags #1811
• Add documentation on pushing to ACR #1831
• Fixes #1837 : keep file capabilities on archival #1838
• Use setup-gcloud@v0.3.0 instead of @master #1854
• Collapse integration test workflows into one config #1855
• Share the Go build cache when building in Dockerfiles #1853
• Call cosign sign --key #1849
• Consolidate PR and real release workflows #1845
• Use golang:1.17 and build from reproducible source #1848
• Start keyless signing kaniko releases #1841
• Attempt to speed up PR image builds by sharing a cache #1844
• Sign digests not tags. #1840
• Fix the e2e K8s test #1842
• Bump the cosign version (a lot) #1839
• Revert "Support mirror registries with path component (#1707)" #1794
• Fix syntax error in release.yaml #1800 Huge thank you for this release towards our contributors:

• Aaruni Aggarwal
• Adrian Newby
• Anbraten
• Andrei Kvapil
• ankitm123
• Benjamin Krenn
• Bernardo Marques
• Dávid Szakállas
• Dawei Ma
• dependabot[bot]
• ejose19
• Eng Zer Jun
• Florian Apolloner
• François JACQUES
• Gabriel Nützi
• Gilbert Gilb's
• Guillaume Calmettes
• Herman
• Jake Sanders
• Janosch Maier
• Jason Hall
• jeunii
• Jose Donizetti
• Kamal Nasser
• Kun Lu
• Lars Seipel
• Liwen Guo
• Matt Moore
• Max Walther
• Mikhail Vasin
• Naveen
• nihilo
• Oliver Gregorius
• Pat Litke
• Patrick Barker
• priyawadhwa
• Rhianna
• Sebastiaan Tammer
• Silvano Cirujano Cuesta
• Tejal Desai
• Travis DePrato
• Wolfgang Walther
• wwade
• Yahav Itzhak
• ygelfand

v1.7.0 Release 2021-10-19

This is Oct's 2021 release.

Highights

• In this release, we have kaniko s390x platform support for multi-arch image.
• Kaniko Self Serve documentation is up to enableuser to build and push kaniko images themselves here

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.7.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.7.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.7.0-slim

• git: accept explicit commit hash for git context #1765
• Remove tarball.WithCompressedCaching flag to resolve OOM Killed error #1722
• disable github action workflow on push to master #1770
• Add s390x support to docker images [copy] #1769
• Fix typo #1719
• Fix composite cache key for multi-stage copy command #1735
• chore: add workflows for pr tests #1766
• Make /bin/sh available to debug image #1748
• Fix executor Dockerfile, which wasn't building #1741
• Support force-building metadata layers into snapshot #1731
• Add support for CPU variants #1676
• refactor: adjust bpfd container runtime detection #1686
• Fix snapshotter ignore list; do not attempt to delete whiteouts of ignored paths #1652
• Add instructions for using JFrog Artifactory #1715
• add SECURITY.md #1710
• Support mirror registries with path component #1707
• Retry extracting filesystem from image #1685
• Bugfix/trailing path separator #1683
• docs: add missing cache-copy-layers arg in README #1672
• save snaphots to tmp dir #1662
• Revert "save snaphots to tmp dir" #1670
• Try to warm all images and warn about errors #1653
• Exit Code Propagation #1655
• Fix changelog headings #1643

Huge thank you for this release towards our contributors:

• Anbraten
• Benjamin Krenn
• Gilbert Gilb's
• Jake Sanders
• Janosch Maier
• Jason Hall
• Jose Donizetti
• Kamal Nasser
• Liwen Guo
• Max Walther
• Mikhail Vasin
• Patrick Barker
• Rhianna
• Silvano Cirujano Cuesta
• Tejal Desai
• Yahav Itzhak
• ankitm123
• ejose19
• nihilo
• priyawadhwa
• wwade

v1.6.0 Release 2021-04-23

This is April's 2021 release.

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.6.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.6.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.6.0-slim

• Support warming images by digest #1629
• Fix resolution of Dockerfile relative dockerignore #1607
• create parent directory before writing digest files #1612
• adds ignore-path command arguments to executor #1622
• Specifying a tarPath will push the image as well #1597

Huge thank you for this release towards our contributors:

• Chris Hoffman
• Colin
• Jon Friesen
• Lars Gröber
• Sascha Schwarze
• Tejal Desai
• Viktor Farcic
• Vivek Kumar
• priyawadhwa

v1.5.2 Release 2021-03-30

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.5.2
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:debug-v1.5.2 and

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:slim-v1.5.2

This release is the first to be signed by cosign! The PEM-encoded public key to validate against the released kaniko images is:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE9aAfAcgAxIFMTstJUv8l/AMqnSKw
P+vLu3NnnBDHCfREQpV/AJuiZ1UtgGpFpHlJLCNPmFkzQTnfyN5idzNl6Q==
-----END PUBLIC KEY-----

v1.5.1 Release 2021-02-22

This release is a minor release with following a fix to version number for v1.5.0 The kaniko images now report the right version number.

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.5.1
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:debug-v1.5.1 and

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:slim-v1.5.1

In this release, we have 1 new feature:

• Improve retry behavior for push operation #1578

And followinf refactors/updates to documentation

• Added a video introduction to Kaniko #1517
• Use up-to-date ca-certificates during build #1580

Huge thank you for this release towards our contributors:

• Sascha Schwarze
• Tejal Desai
• Viktor Farcic

v1.5.0 Release 2021-01-25

This releases publishes multi-arch image kaniko images for following platforms

1. linux/amd64
2. linux/arm64
3. linux/ppc64le

If you want to add other platforms, please talk to @tejal29.

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.5.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:debug-v1.5.0 and

In this release, we have 2 slim executor images which don't contain any authentication binaries.

1. gcr.io/kaniko-project/executor:slim &
2. gcr.io/kaniko-project/executor:slim-v1.5.0

New Features

• Mutli-arch support #1531, #1474
• Add support to fetch a github pull request #1543
• Add --image-name-tag-with-digest flag #1541
• add caching copy layers back #1518
• Profiling for Snapshotting errors. #1530
• feat(warmer): Warmer now supports all registry-related flags #1499
• feat: Add https tar.gz remote source for context #1519
• Add option customPlatform #1500
• feat: support multiple registry mirrors with fallback #1498
• Add s390x kaniko build to multi-arch list #1475

Bug Fixes

• reject tarball writes with no destinations #1534
• Fix travis-ci link #1535
• fix: extract file as same user for warmer docker image #1538
• fix: update busybox version to fix CVE-2018-1000500 #1532
• Fix typo in error message #1494
• Fix COPY with --chown command #1477
• Remove unused code #1495
• Fixes #1469 : Remove file that matches with the directory path #1478
• fix: CheckPushPermissions not being called when using --no-push and --cache-repo #1471

Refactors

• Switch to runtime detection via bpfd/proc #1502
• Update ggcr to pick up estargz and caching option #1527

Documentation

• Document flags for tarball build only #1503
• doc: clarify the format of --registry-mirror #1504
• add section to run lints #1480
• Add docs for GKE workload identity. #1476

Huge thank you for this release towards our contributors:

• Alec Rajeev
• Fabrice
• Josh Chorlton
• Lars
• Lars Toenning
• Matt Moore
• Or Geva
• Severin Strobl
• Shashank
• Sladyn
• Tejal Desai
• Theofilos Papapanagiotou
• Vincent Behar
• Yulia Gaponenko
• ankitm123
• bahetiamit
• ejose19
• mickkael
• zhouhaibing089

v1.3.0 Release 2020-10-22

This release publishes, multi-arch image kaniko executor images.

Note: The muti-arch images are only available for executor images. Contributions Welcome!!

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.3.0
gcr.io/kaniko-project/executor:latest

gcr.io/kaniko-project/executor:arm64
gcr.io/kaniko-project/executor:arm64-v1.3.0

gcr.io/kaniko-project/executor:amd64
gcr.io/kaniko-project/executor:amd64-v1.3.0

gcr.io/kaniko-project/executor:multi-arch
gcr.io/kaniko-project/executor:multi-arch-v1.3.0

The debug images are available at:

gcr.io/kaniko-project/executor:v1.3.0-debug
gcr.io/kaniko-project/executor:debug-v1.3.0 and
gcr.io/kaniko-project/executor:debug

New Features

• Added in docker cred helper for Azure Container Registry sourcing auth tokens directly from environment to debug image #1458
• Add multi-arch image via Bazel #1452

Bug Fixes

• Fix docker build tag #1460
• Fix .dockerignore for build context copies in later stages #1447
• Fix permissions on cache when --no-push is set #1445

Huge thank you for this release towards our contributors:

• Akram Ben Aissi
• Alex Szakaly
• Alexander Sharov
• Anthony Davies
• Art Begolli
• Batuhan Apaydın
• Ben Einaudi
• Carlos Alexandro Becker
• Carlos Sanchez
• Chris Mellard
• Chris Sng
• Christopher Hlubek
• Cole Wippern
• Dani Raznikov
• Daniel Marks
• David Dooling
• Didier Durand
• DracoBlue
• Gabriel Virga
• Gilbert Gilb's
• Giovan Isa Musthofa
• Gábor Lipták
• Harmen Stoppels
• Ian Kerins
• James Ravn
• Joe Kutner
• Jon Henrik Bjørnstad
• Jon Johnson
• Jordan GOASDOUE
• Jordan Goasdoue
• Jordan Goasdoué
• Josh Chorlton
• Josh Soref
• Keisuke Umegaki
• Liubov Grinkevich
• Logan.Price
• Lukasz Jakimczuk
• Martin Treusch von Buttlar
• Matt Moore
• Mehdi Abaakouk
• Michel Hollands
• Mitchell Friedman
• Moritz Wanzenböck
• Or Sela
• PhoenixMage
• Pierre-Louis Bonicoli
• Renato Suero
• Sam Stoelinga
• Shihab Hasan
• Sladyn
• Takumasa Sakao
• Tejal Desai
• Thomas Bonfort
• Thomas Stromberg
• Tinjo Schöni
• Tom Prince
• Vincent Latombe
• Wietse Muizelaar
• Yoan Blanc
• Yoriyasu Yano
• Yuheng Zhang
• aca
• cvgw
• ejose19
• ohchang-kwon
• priyawadhwa
• tinkerborg
• tsufeki
• xanonid
• yw-liu
• 好风

v1.2.0 Release 2020-09-30

This is 27th release of Kaniko!

In this release, Copy layers are not cached there by making builds faster!!

• Stop caching COPY layers #1408

Huge thank you for this release towards our contributors:

• Ian Kerins

v1.1.0 Release 2020-09-30

This is the 26th release of Kaniko!

New Features

• Add support for Vagrant #1428
• Allow DOCKER_CONFIG to be a filename #1409

Bug Fixes

• Fix docker-credential-gcr helper being called for multiple registries #1439
• Fix docker-credential-gcr not configured across regions#1417

Updates and Refactors

• add tests for configuring docker credentials across regions. #1426

Documentation

• Update README.md #1437
• spelling: storage #1425
• Readme.md : Kaniko -> kaniko #1435
• initial release instructions #1419
• Improve --use-new-run help text, update README with missing flags #1405
• Add func to append to ignorelist #1397
• Update README.md re: layer cache behavior #1394
• Fix links on README #1398

Huge thank you for this release towards our contributors:

• aca
• Akram Ben Aissi
• Alexander Sharov
• Alex Szakaly
• Anthony Davies
• Art Begolli
• Batuhan Apaydın
• Ben Einaudi
• Carlos Alexandro Becker
• Carlos Sanchez
• Chris Sng
• Christopher Hlubek
• Cole Wippern
• cvgw
• Daniel Marks
• Dani Raznikov
• David Dooling
• Didier Durand
• DracoBlue
• Gábor Lipták
• Gabriel Virga
• Gilbert Gilb's
• Giovan Isa Musthofa
• Harmen Stoppels
• Ian Kerins
• James Ravn
• Joe Kutner
• Jon Henrik Bjørnstad
• Jon Johnson
• Jordan Goasdoue
• Jordan GOASDOUE
• Jordan Goasdoué
• Josh Chorlton
• Josh Soref
• Keisuke Umegaki
• Liubov Grinkevich
• Logan.Price
• Lukasz Jakimczuk
• Martin Treusch von Buttlar
• Mehdi Abaakouk
• Michel Hollands
• Mitchell Friedman
• Moritz Wanzenböck
• ohchang-kwon
• Or Sela
• PhoenixMage
• Pierre-Louis Bonicoli
• priyawadhwa
• Renato Suero
• Sam Stoelinga
• Shihab Hasan
• Takumasa Sakao
• Tejal Desai
• Thomas Bonfort
• Thomas Stromberg
• Thomas Strömberg
• tinkerborg
• Tom Prince
• tsufeki
• Vincent Latombe
• Wietse Muizelaar
• xanonid
• Yoan Blanc
• Yoriyasu Yano
• Yuheng Zhang
• yw-liu
• 好风

v1.0.0 Release 2020-08-17

This is the 25th release of Kaniko!

New Features

• Specify advance options for git checkout branch. #1322
  • To specify a branch, use --git=branch=branchName
  • To specify an option to checkout a single branch, use --git=single-branch=true
  • To change submodule recursions behavior while cloning, use --git=recurse-submodules=true
• Checkout a specific git commit #1153
• Add ability to specify GIT_TOKEN for git source repository. #1318
• The experimental --use-new-run flag avoid relying on timestamp. #1383

Bug Fixes

• Set correct PATH for exec form #1342
• executor image: fix USER environment variable #1364
• fix use new run marker #1379
• Use current platform when fetching image in warmer #1374
• Bump version number mismatch #1338
• Bugfix: Reproducible layers with whiteout #1350
• prepend image name when using registry-mirror so library/ is inferred #1264
• Add command should fail on 40x when fetching remote file #1326

Refactors & Updates

• bump go-containerregistry dep #1371
• feat: upgrade go-git #1319
• Move snapshotPathPrefix into a method #1359

Documentation

• Added instructions to use gcr without kubernetes #1385
• Format json & yaml in README #1358

Huge thank you for this release towards our contributors:

• Alex Szakaly
• Alexander Sharov
• Anthony Davies
• Art Begolli
• Batuhan Apaydın
• Ben Einaudi
• Carlos Alexandro Becker
• Carlos Sanchez
• Chris Sng
• Christopher Hlubek
• Cole Wippern
• Dani Raznikov
• Daniel Marks
• David Dooling
• DracoBlue
• Gabriel Virga
• Gilbert Gilb's
• Giovan Isa Musthofa
• Gábor Lipták
• Harmen Stoppels
• James Ravn
• Joe Kutner
• Jon Henrik Bjørnstad
• Jon Johnson
• Jordan GOASDOUE
• Jordan Goasdoue
• Jordan Goasdoué
• Josh Chorlton
• Liubov Grinkevich
• Logan.Price
• Lukasz Jakimczuk
• Mehdi Abaakouk
• Michel Hollands
• Mitchell Friedman
• Moritz Wanzenböck
• Or Sela
• PhoenixMage
• Pierre-Louis Bonicoli
• Renato Suero
• Sam Stoelinga
• Shihab Hasan
• Takumasa Sakao
• Tejal Desai
• Thomas Bonfort
• Thomas Stromberg
• Thomas Strömberg
• Tom Prince
• Vincent Latombe
• Wietse Muizelaar
• Yoan Blanc
• Yoriyasu Yano
• Yuheng Zhang
• aca
• cvgw
• ohchang-kwon
• priyawadhwa
• tinkerborg
• tsufeki
• xanonid
• yw-liu

v0.24.0 Release 2020-07-01

This is the 24th release of Kaniko!

New Features

• Add a new run command along with a new flag #1300
• Add redo snapshotter. #1301
• Add pkg.dev to automagic config file population #1328
• kaniko now clone git repositories recursing submodules by default #1320

Bug Fixes

• Fix README.md #1323
• Fix docker-credential-gcr owner and group id #1307

Refactors

• check file changed in loop #1302
• ADD GCB benchmark code #1299
• benchmark FileSystem snapshot project added #1288
• [Perf] Reduce loops over files when taking FS snapshot. #1283
• Fix README.md #1323
• Fix docker-credential-gcr owner and group id #1307
• benchmark FileSystem snapshot project added #1288
• [Perf] Reduce loops over files when taking FS snapshot. #1283

Huge thank you for this release towards our contributors:

• Alexander Sharov
• Alex Szakaly
• Anthony Davies
• Art Begolli
• Batuhan Apaydın
• Ben Einaudi
• Carlos Alexandro Becker
• Carlos Sanchez
• Chris Sng
• Cole Wippern
• cvgw
• Daniel Marks
• Dani Raznikov
• David Dooling
• DracoBlue
• Gábor Lipták
• Gabriel Virga
• Gilbert Gilb's
• Giovan Isa Musthofa
• James Ravn
• Jon Henrik Bjørnstad
• Jon Johnson
• Jordan Goasdoué
• Liubov Grinkevich
• Logan.Price
• Lukasz Jakimczuk
• Mehdi Abaakouk
• Michel Hollands
• Mitchell Friedman
• Moritz Wanzenböck
• ohchang-kwon
• Or Sela
• PhoenixMage
• priyawadhwa
• Sam Stoelinga
• Tejal Desai
• Thomas Bonfort
• Thomas Stromberg
• Thomas Strömberg
• tinkerborg
• Tom Prince
• Vincent Latombe
• Wietse Muizelaar
• xanonid
• Yoan Blanc
• Yoriyasu Yano
• Yuheng Zhang
• yw-liu

v0.23.0 Release 2020-06-04

This is the 23rd release of Kaniko!

Bug Fixes

• Resolving nested meta ARGs #1260
• add 64 busybox #1254
• Apply dockefile exclude only for first stage #1234

New Features

• Add /etc/nsswitch.conf for /etc/hosts name resolution #1251
• Add ability to set git auth token using environment variables #1263
• Add retries to image push. #1258
• Update docker-credential-gcr to support auth with GCP Artifact Registry #1255

Updates and Refactors

• Added integration test for multi level argument #1285
• rename whitelist to ignorelist #1295
• Remove direct use of DefaultTransport #1221
• fix switching to non existent workdir #1253
• remove duplicates save for the same dir #1252
• add timings for resolving paths #1284

Documentation

• Instructions for using stdin with kubectl #1289
• Add GoReportCard badge to README #1249
• Make support clause more bold. #1273
• Correct typo #1250
• docs: add registry-certificate flag to readme #1276

Huge thank you for this release towards our contributors:

• Anthony Davies
• Art Begolli
• Batuhan Apaydın
• Ben Einaudi
• Carlos Alexandro Becker
• Carlos Sanchez
• Chris Sng
• Cole Wippern
• Dani Raznikov
• Daniel Marks
• David Dooling
• DracoBlue
• Gabriel Virga
• Gilbert Gilb's
• Giovan Isa Musthofa
• Gábor Lipták
• James Ravn
• Jon Henrik Bjørnstad
• Jordan GOASDOUE
• Liubov Grinkevich
• Logan.Price
• Lukasz Jakimczuk
• Mehdi Abaakouk
• Michel Hollands
• Mitchell Friedman
• Moritz Wanzenböck
• Or Sela
• PhoenixMage
• Sam Stoelinga
• Tejal Desai
• Thomas Bonfort
• Thomas Stromberg
• Thomas Strömberg
• Tom Prince
• Vincent Latombe
• Wietse Muizelaar
• Yoan Blanc
• Yoriyasu Yano
• Yuheng Zhang
• cvgw
• ohchang-kwon
• tinkerborg
• xanonid
• yw-liu

v0.22.0 Release 2020-05-07

This is a minor release of kaniko fixing:

• GCB Authentication issue 1242
• Re-added files if removed from base imaged 1236

Big thanks to

• David Dooling

v0.21.0 Release - 2020-05-04

This is the 21th release of Kaniko! Thank you for patience.

This is minor release which fixes the /kaniko/.docker being removed in executor image

• Fixes #1227 - Readded the /kaniko/.docker directory #1230

v0.20.0 Release - 2020-05-04

This is the 20th release of Kaniko! Thank you for patience. Please give us feedback on how we are doing by taking a short 5 question survey

In this release, the highlights are:

1. Fix doubling cache layers size and error due to duplicate files in cached layers
2. Kaniko now supports reading a tar context from a stdin using `--context=tar:/.
3. Kaniko adds a new flag --context-sub-path to represent a subpath within the given context
4. Skip buiklding unused stages using --skip-unused-stages flags.

Bug Fixes

• Snapshot FS on first cache miss. #1214
• Add secondary group impersonation w/ !cgo support #1164
• kaniko generates images that docker supports in the presence of dangling symlinks #1193
• Handle MAINTAINERS when passing --single-snapshot. #1192
• Multistage ONBUILD COPY Support #1190
• fix previous name checking in 'executor.build.fetchExtraStages' #1167
• Always add parent directories of files to snapshots. #1166
• Fix workdir command pointing to relative dir in first command.
• fix stages are now resolved correctly when --skip-unused-stages is used

New Features

• Add ability to use public GCR repos without being authenticated #1140
• Add timestamp to logs #1211
• Add http support for git repository context #1196
• Kaniko now resolves args from all stages #1160
• kaniko adds a new flag --context-sub-path to represent a subpath within the given context
• feat: allow injecting through stdin tar.gz on kaniko #1139
• Set image platform for any build #1130
• Add --log-format parameter to README.md #1216
• feat: multistages now respect dependencies without building unnecessary stages #1165

Refactors and Updates

• Refactor Kaniko to test across multistages #1155
• upgrade go container registry to latest master #1146
• small perf optimizing. Only remove whiteout path if it needs to be included in base image #1147
• Don't generate cache key, if not caching builds. #1194
• Set very large logs to Trace level #1203
• optimize: don't parse Dockerfile twice, reusing stages #1174
• 32bit overflow fix #1168

Documentation

• Update Pushing to Docker Hub to use v2 api #1204
• Fix line endings in shell script #1199

Huge thank you for this release towards our contributors:

• Anthony Davies
• Batuhan Apaydın
• Ben Einaudi
• Carlos Alexandro Becker
• Carlos Sanchez
• Cole Wippern
• cvgw
• Dani Raznikov
• DracoBlue
• Gilbert Gilb's
• Giovan Isa Musthofa
• James Ravn
• Jon Henrik Bjørnstad
• Jordan GOASDOUE
• Jordan Goasdoué
• Liubov Grinkevich
• Logan.Price
• Michel Hollands
• Moritz Wanzenböck
• ohchang-kwon
• Or Sela
• PhoenixMage
• Sam Stoelinga
• Tejal Desai
• Thomas Bonfort
• Thomas Stromberg
• Thomas Strömberg
• tinkerborg
• Tom Prince
• Vincent Latombe
• Wietse Muizelaar
• xanonid
• Yoan Blanc
• Yuheng Zhang
• yw-liu

v0.19.0 Release - 2020-03-18

This is the 19th release of Kaniko!

In this release, the highlights are:

1. Cache layer size duplication regression in v0.18.0 is fixed. #1138
2. Cache performance when using build-args. build-args are only part of cache key for a layer if it is used.
3. Kaniko can support a tar.gz context with tar:// prefix.
4. Users can provide registry certificates for private registries.

Bug Fixes

• Use the correct name for acr helper #1121
• remove build args from composite key and replace all build args #1085
• fix resolve link for dirs with trailing / #1113

New Features

• feat: add support of local '.tar.gz' file inside the kaniko container #1115
• Add support to --chown flag to ADD command (Issue #57) #1134
• executor: add --label flag #1075
• Allow user to provide registry certificate #1037

Refactors And Updates

• Migrate to golang 1.14 #1098
• Make cloudbuild.yaml re-usable for anyone #1135
• fix: credential typo #1128
• Travis k8s integration test #1124
• Add more tests for Copy and some fixes. #1114

Documentation

• Update README on running in Docker #1141

Huge thank you for this release towards our contributors:

• Anthony Davies
• Batuhan Apaydın
• Ben Einaudi
• Carlos Sanchez
• Cole Wippern
• cvgw
• Dani Raznikov
• DracoBlue
• James Ravn
• Jordan GOASDOUE
• Logan.Price
• Moritz Wanzenböck
• ohchang-kwon
• Or Sela
• Sam Stoelinga
• Tejal Desai
• Thomas Bonfort
• Thomas Strömberg
• tinkerborg
• Wietse Muizelaar
• xanonid
• Yoan Blanc
• Yuheng Zhang

v0.18.0 Release -2020-03-05

This release fixes all the regression bugs associated with v0.17.0 and v0.17.1. This release, the team did a lot of work improving our test infrastructure, more tests cases and refactored filesystem walking.

Thank you all for your patience and supporting us throughout!

Bug Fixes

• fix home being reset to root #1072
• fix user metadata set to USER:GROUP if group string is not set #1105
• check for filepath.Walk error everywhere #1086
• fix #1092 TestRelativePaths #1093
• Resolve filepaths before scanning for changes #1069
• Fix #1020 os.Chtimes invalid arg #1074
• Fix #1067 - image no longer available #1068
• Ensure image SHA stays consistent when layer contents haven't changed #1032
• fix flake TestRun/Dockerfile_test_copy_symlink #1030

New Features

• root: add --registry-mirror flag #836
• set log format using a flag #1031
• Do not recompute layers retrieved from cache #882
• More idiomatic logging config #1040

Test Refactors and Updates

• Split travis integration tests #1090
• Add integration tests from Issues #1054
• add integration tests with their own context #1088
• Fixed typo in README.md #1060
• test: refactor container-diff call #1077
• Refactor integration image built #1049
• separate travis into multiple jobs for parallelization #1055
• refactor copy.chown code and add more tests #1027
• Allow contributors to launch integration tests against local registry #1014

Documentation

• add design proposal template #1046
• Update filesystem proposal status to Reviewed #1066
• update instructions for running integration tests #1034
• design proposal 01: filesystem resolution #1048
• Document that this tool is not officially supported by Google #1044
• Fix example pod.yml to not mount to root #1043
• fixing docker run command in README.md #1103

Huge thank you for this release towards our contributors:

• Anthony Davies
• Batuhan Apaydın
• Ben Einaudi
• Cole Wippern
• cvgw
• DracoBlue
• James Ravn
• Logan.Price
• Moritz Wanzenböck
• ohchang-kwon
• Or Sela
• Sam Stoelinga
• Tejal Desai
• Thomas Bonfort
• Thomas Strömberg
• tinkerborg
• Wietse Muizelaar
• xanonid
• Yoan Blanc

v0.17.1 Release - 2020-02-04

This is minor patch release to fix #1002

v0.17.0 Release - 2020-02-03

New Features

• Expand build argument from environment when no value specified #993
• whitelist /tmp/apt-key-gpghome.* directory #1000
• Add flag to --whitelist-var-run set to true to preserver default kani… #1011
• Prefer platform that is currently running for pulling remote images and kaniko binary Makefile target #980

Bug Fixes

• Fix caching to respect .dockerignore #854
• Fixes #988 run_in_docker.sh only works with gcr.io #990
• Fix Symlinks not being copied across stages #971
• Fix home and group set for user command #995
• Fix COPY or ADD to symlink destination breaks image #943
• [Caching] Fix bug with deleted files and cached run and copy commands
• [Mutistage Build] Fix bug with capital letter in stage names #983
• Fix #940 set modtime when extracting #981
• Fix Ability for ADD to unTar a file #792

Updates and Refactors

• fix test flake #1016
• Upgrade go-containerregistry third-party library #957
• Remove debug tag being built for every push to master #1004
• Run integration tests in Travis CI #979

Huge thank you for this release towards our contributors:

• Anthony Davies
• Ben Einaudi
• Cole Wippern
• cvgw
• Logan.Price
• Moritz Wanzenböck
• ohchang-kwon
• Sam Stoelinga
• Tejal Desai
• Thomas Bonfort
• Wietse Muizelaar

v0.16.0 Release - 2020-01-17

Happy New Year 2020!

Bug Fixes

• Support for private registries in the cache warmer #941
• Fix bug with docker compatibility ArgsEscaped #964
• Clean code (Condition is always 'false' because 'err' is always 'nil' ). #967
• Fix #647 Copy dir permissions #961
• Allow setting serviceAccount in integration test #965
• Fix #926 cache warmer and method signature #927
• Fix #948 update valid license years #949
• Move hash bang to first line. #954
• Fix #944 include docker-credential-acr-linux #945
• Fix #925 broken insecure pull #932
• Push to ECR using instance roles #930
• Upgrade aws go sdk for supporting eks oidc credential chain #832
• Push image #866

Updates and Refactors

• Fixes #950 integration test failing on go 1.13 #955
• Tidy dependencies #939
• changing to modules from dependencies #869
• Changing Log to trace #920

Documentation

• docs: fix document on DoBuild #668
• Update outdated toc in README.md #867

Huge thank you for this release towards our contributors:

• Adrian Mouat
• Balint Pato
• Ben Einaudi
• Benjamin EINAUDI
• Carlos Sanchez
• Cole Wippern
• Daniel Strobusch
• Eduard Laur
• Fahri Yardımcı
• Josh Soref
• lou-lan
• Nao YONASHIRO
• poy
• Prashant Arya
• priyawadhwa
• Pweetoo
• Remko van Hunen
• Sam Stoelinga
• Stijn De Haes
• Tejal Desai
• tommaso.doninelli
• Will Ripley

v0.15.0 Release - 2019-12-20

Bug fixes

• Fix #899 cached copy results in inconsistent key #914
• Fix contribution issue sentence #912
• Include source stage cache key in cache key for COPY commands using --from #883
• Fix failure when using capital letters in image alias in 'FROM ... AS…' instruction #839
• Add golangci.yaml file matching current config #893
• when copying, skip files with the same name #905
• Modified error message for writing image with digest file #849
• Don't exit optimize early; record last cachekey #892
• Final cachekey for stage #891
• Update error handling and logging for cache #879
• Resolve symlink targets to abs path before copying #857
• Fix quote strip behavior for ARG values #850

Updates and Refactors

• add unit tests for caching run and copy #888
• Only build required docker images for integration tests #898
• Add integration test for add url with arg #863
• Add unit tests for compositecache and stagebuilder #890

Documentation

• updated readme #906
• nits in README #861
• Invalid link to missing file config.json #876
• Fix README.md anchor links #872
• Update readme known issues #874

Huge thank you for this release towards our contributors:

• Balint Pato
• Ben Einaudi
• Cole Wippern
• Eduard Laur
• Josh Soref
• Pweetoo
• Tejal Desai
• Will Ripley
• poy
• priyawadhwa
• tommaso.doninelli

v0.14.0 Release - 2019-11-08

New Features

• Added --image-name-with-digest flag #841
• Add support to download context file from Azure Blob Storage #816
• Add BUILD_ARGs to ease use of proxy #810

Bug Fixes

• fix tests for default home #824
• Issue #439 Strip out double quotes in ARG value #834
• Fixes caching with COPY command #773
• 828: clean up docker doc, fix context var in run cmd #829
• fix build_args in MakeFile, have Travis run make images to preven issue in future #821

Updates and Refactors

• changing debug to trace #825

Documentation

• Details about --tarPath usage improved #811

v0.13.0 Release - 2019-10-04

New Features

• Add kaniko version command #796
• Write data about pushed images for GCB kaniko build step if env var BUILDER_OUTPUT is set #602
• Support Dockerfile.dockerignore relative to Dockerfile #801

Bug Fixes

• fix creating abs path for urls #804
• Fix #691 - ADD does not understand ENV variables #768
• Resolve relative paths to absolute paths in command line arguments #736
• insecure flag is now honored with --cache flag. #685
• Reduce log level for adding file message #624
• Fix SIGSEGV on file system deletion while building #765

Updates and Refactors

• add debug level info what is the layer type #805
• Update base image to golang:1.12 #648
• Add some triage notes to issue template. #794
• double help text about skip-verify-tls #782
• Add a pull request template #795
• Correct CheckPushPermission comment. #671

Documentation

• Use kaniko with docker config.json password #129
• Add getting started tutorial #790

Performance

• feat: optimize build #694

Huge thank you for this release towards our contributors:

• alexa
• Andreas Bergmeier
• Carlos Alexandro Becker
• Carlos Sanchez
• chhsia0
• debuggy
• Deniz Zoeteman
• Don McCasland
• Fred Cox
• Herrmann Hinz
• Hugues Alary
• Jason Hall
• Johannes 'fish' Ziemke
• jonjohnsonjr
• Luke Wood
• Matthew Dawson
• Mingliang Tao
• Monard Vong
• Nao YONASHIRO
• Niels Denissen
• Prashant
• priyawadhwa
• Priya Wadhwa
• Sascha Askani
• sharifelgamal
• Sharif Elgamal
• Takeaki Matsumoto
• Taylor Barrella
• Tejal Desai
• Thao-Nguyen Do
• tralexa
• Victor Noel
• v.rul
• Warren Seymour
• xanonid
• Xueshan Feng
• Антон Костенко
• Роман Небалуев

v0.12.0 Release - 2019-09/13

New Features

• Added --oci-layout-path flag to save image in OCI layout. #744
• Add support for S3 custom endpoint #698

Bug Fixes

• Setting PATH #760
• Remove leading slash in layer tarball paths (Closes: #726) #729

Updates and Refactors

• Remove cruft #635
• Add desc for --skip-tls-verify-pull to README #493

Huge thank you for this release towards our contributors:

• Carlos Alexandro Becker
• Carlos Sanchez
• chhsia0
• Deniz Zoeteman
• Luke Wood
• Matthew Dawson
• Niels Denissen
• Priya Wadhwa
• Sharif Elgamal
• Takeaki Matsumoto
• Taylor Barrella
• Tejal Desai
• v.rul
• Warren Seymour
• xanonid
• Xueshan Feng
• Роман Небалуев

v0.11.0 Release - 2019-08-23

Bug Fixes

• fix unpacking archives via ADD #717
• Reverted not including build args in cache key #739
• Create cache directory if it doesn't already exist #452

New Features

• add multiple user agents to kaniko if upstream_client_type value is set #750
• Make container layers captured using FS snapshots reproducible #714
• Include warmer in debug image #497
• Bailout when there is not enough input arguments #735
• Add checking image presence in cache prior to downloading it #723

Additonal PRs

• Document how to build from git reference #730
• Misc. small changes/refactoring #712
• Update go-containerregistry #680
• Update version of go-containerregistry #724
• feat: support specifying branch for cloning #703

Huge thank you for this release towards our contributors:

• Carlos Alexandro Becker
• Carlos Sanchez
• Deniz Zoeteman
• Luke Wood
• Matthew Dawson
• priyawadhwa
• sharifelgamal
• Sharif Elgamal
• Taylor Barrella
• Tejal Desai
• v.rul
• Warren Seymour
• Xueshan Feng
• Роман Небалуе

v0.10.0 Release - 2019-06-19

Bug Fixes

• Fix kaniko caching #639
• chore: fix typo #665
• Fix file mode bug #618
• Fix arg handling for multi-stage images in COPY instructions. #621
• Fix parent directory permissions #619
• Environment variables should be replaced in URLs in ADD commands. #580
• Update the cache warmer to also save manifests. #576
• Fix typo in error message #569

New Features

• Add SkipVerify support to CheckPushPermissions. #663
• Creating github Build Context #672
• Add --digest-file flag to output built digest to file. #655
• README.md: update BuildKit/img comparison #642
• Add documentation for --verbosity flag #634
• Optimize file copying and stage saving between stages. #605
• Add an integration test for USER unpacking. #600
• Added missing documentation for --skip-tls-verify-pull arg #593
• README.me: update Buildah description #586
• Add missing tests for bucket util #565
• Look for manifests in the local cache next to the full images. #570
• Make the run_in_docker script support caching. #564
• Refactor snapshotting #561
• Stop storing a separate cache hash. #560
• Speed up workdir by always returning an empty filelist (rather than a… #557
• Refactor whitelist handling. #559
• Refactor the build loop to fetch stagebuilders earlier. #558

Additonal PRs

• Improve changelog dates #657
• Change verbose output from info to debug #640
• Check push permissions before building images #622
• Bump go-containerregistry to 8c1640add99804503b4126abc718931a4d93c31a #609
• Update go-containerregistry #599
• Log "Skipping paths under..." to debug #571

Huge thank you for this release towards our contributors:

• Achilleas Pipinellis
• Adrian Duong
• Akihiro Suda
• Andreas Bergmeier
• Andrew Rynhard
• Anthony Weston
• Anurag Goel
• Balint Pato
• Christie Wilson
• Daisuke Taniwaki
• Dan Cecile
• Dirk Gustke
• dlorenc
• Fredrik Lönnegren
• Gijs
• Jake Shadle
• James Rawlings
• Jason Hall
• Johan Hernandez
• Johannes 'fish' Ziemke
• Kartik Verma
• linuxshokunin
• MMeent
• Myers Carpenter
• Nándor István Krácser
• Nao YONASHIRO
• Priya Wadhwa
• Sharif Elgamal
• Shuhei Kitagawa
• Valentin Rothberg
• Vincent Demeester

v0.9.0 Release - 2019-02-08

Bug Fixes

• Bug fix with volumes declared in base images during multi-stage builds
• Bug fix during snapshotting multi-stage builds.
• Bug fix for caching with tar output.

v0.8.0 Release - 2019-01-29

New Features

• Even faster snapshotting with godirwalk
• Added TTL for caching

Updates

• Change cache key calculation to be more reproducible.
• Make the Digest calculation faster for locally-cached images.
• Simplify snapshotting.

Bug Fixes

• Fix bug with USER command and unpacking base images.
• Added COPY --from=previous stage name/number validation

v0.7.0 Release - 2018-12-10

New Features

• Add support for COPY --from an unrelated image

Updates

• Speed up snapshotting by using filepath.SkipDir
• Improve layer cache upload performance
• Skip unpacking the base image in certain cases

Bug Fixes

• Fix bug with call loop
• Fix caching for multi-step builds

v0.6.0 Release - 2018-11-06

New Features

• parse arg commands at the top of dockerfiles #404
• Add buffering for large layers. #428
• Separate Insecure Pull Options #409
• Add support for .dockerignore file #394
• Support insecure pull #401

Updates

• Preserve options when doing a cache push #423
• More cache cleanups: #397
• adding documentation for base image caching #421
• Update go-containerregistry #420
• Update README #419
• Use remoteImage function when getting digest for cache #413
• adding exit 1 when there are not enough command line vars passed to `… #415
• "Container Builder" - > "Cloud Build" #414
• adding the cache warmer to the release process #412

Bug Fixes

• Fix bugs with .dockerignore and improve integration test #424
• fix releasing the cache warmer #418

v0.5.0 Release - 2018-10-16

New Features

• Persistent volume caching for base images #383

Updates

• Use only the necessary files in the cache keys. #387
• Change loglevel for copying files to debug (#303) #393
• Improve IsDestDir functionality with filesystem info #390
• Refactor the build loop. #385
• Rework cache key generation a bit. #375

Bug Fixes

• fix mispell #396
• Update go-containerregistry dependency #388
• chore: fix broken markdown (CHANGELOG.md) #382
• Don't cut everything after an equals sign #381

v0.4.0 Release - 2018-10-01

New Features

• Add a benchmark package to store and monitor timings. #367
• Add layer caching to kaniko #353
• Update issue templates #340
• Separate --insecure-skip-tls-verify flag into two separate flags #311
• Updated created by time for built image #328
• Add Flag to Disable Push to Container Registry #292
• Add a new flag to cleanup the filesystem at the end #370

Updates

• Update README to add information about layer caching #364
• Suppress usage upon Run error #356
• Refactor build into stageBuilder type #343
• Replace gometalinter with GolangCI-Lint #349
• Add Key() to LayeredMap and Snapshotter #337
• Add CacheCommand to DockerCommand interface #336
• Extract filesystem in order rather than in reverse #326
• Configure logs to show colors #327
• Enable shared config for s3 #321
• Update go-containerregistry. #305
• Tag latest in cloudbuild.yaml #287
• Set default home value #281
• Update deps #265
• Update go-containerregistry dep and remove unnecessary Options #376
• Add a bit more context to layer offset failures #264

Bug Fixes

• Whitelist /busybox in the debug image #369
• Check --cache-repo is provided with --cache and --no-push #374
• Fixes a whitelist issue when untarring files in ADD commands. #371
• set default HOME env properly #341
• Review config for cmd/entrypoint after building a stage #348
• Enable overwriting of links (solves #351) #360
• Only return stdout when running commands for integration tests #363
• Whitelist /etc/mtab #347
• Added a KanikoStage type for each stage of a Dockerfile #320
• Make sure paths are absolute before matching files to wildcard sources #330
• Build each kaniko image separately #324
• support multiple tags when writing to a tarfile #323
• Snapshot only specific files for COPY #319
• Remove some constraints from our Gopkg.toml. #318
• Always snapshot files in COPY and RUN commands #289
• Refactor command line arguments and the executor #306
• Fix bug in SaveStage function for multistage builds #295
• Get absolute path of file before checking whitelist #293
• Fix support for insecure registry #169
• ignore sockets when adding to tar #288
• fix add command bug when adding remote URLs #277
• Environment variables with multiple '=' are not parsed correctly #278
• Ensure cmd.SysProcAttr is set before modifying it #275
• Don't copy same files twice in copy integration tests #273
• Extract intermediate stages to filesystem #266
• Fix process group handling. #271
• Only add whiteout files once #270
• Fix handling of the volume directive #334

v0.3.0 Release - 2018-07-31

New Features

• Local integration testing #256
• Add --target flag for multistage builds #255
• Look for on cluster credentials using k8s chain #243

Bug Fixes

• Kill grandchildren spun up by child processes #247
• Fix bug in copy command #221
• Multi-stage errors when referencing earlier stages #233

v0.2.0 Release - 2018-07-09

New Features

• Support for adding different source contexts, including Amazon S3 #195
• Added --reproducible #205 and --single-snapshot #204 flags
• Documented running kaniko in gVisor #194
• Update go-containerregistry so kaniko works better with Harbor and Gitlab#227
• Push image to multiple destinations #184

v0.1.0 Release - 2018-05-17

New Features

• The majority of Dockerfile commands are feature complete #1
• Support for multi-stage Dockerfile builds #141
• Refactored integration tests #126
• Added debug image with a busybox shell #171
• Added credential helper for Amazon ECR #167