feat: modernize kaniko repo on par with git-clone and golang

[vdemeester]

Changes

Modernize the kaniko repository to match the structure and quality of the git-clone and golang repos in tektoncd-catalog.

Task modernization:

• Upgrade from tekton.dev/v1beta1 to tekton.dev/v1 API
• Switch from archived GoogleContainerTools/kaniko (v1.5.1) to the community-maintained fork osscontainertools/kaniko (v1.27.6)
• Add multi-arch support: linux/amd64, linux/arm64, linux/ppc64le
• Add KANIKO_DIR param for bootstrapping kaniko with itself
• Fix EXTRA_ARGS array expansion ($(params.EXTRA_ARGS[*]))
• Replace pinned bash image with alpine for the write-url step

StepAction:

• Add derived stepaction/kaniko/kaniko.yaml (generated from the Task, never edited directly)
• Generation script (hack/generate-stepaction.py) converts workspaces to params (source → source-path, dockerconfig → dockerconfig-path)
• Merges both Task steps (build + write-url) into a single StepAction script

CI/CD:

• build.yaml: lint (YAML validation + StepAction sync check) + e2e matrix across 4 Tekton Pipelines LTS versions + bundle e2e
• release.yaml: tag-triggered Tekton bundle publish to ghcr.io/tektoncd-catalog/kaniko
• Dependabot for GitHub Actions updates

Repository scaffolding:

• README, CONTRIBUTING, DEVELOPMENT, AGENTS.md, LICENSE, OWNERS
• ArtifactHub metadata for both task and stepaction
• PR template
• Release script (hack/release.sh)

Tests:

• E2E test using Kind cluster + in-cluster registry
• Bundle resolver e2e test via ttl.sh

Reference: tektoncd/catalog PR #1385 for the kaniko fork context.

Submitter Checklist

• Includes tests for new or changed functionality
• Includes docs for user-facing changes
• Commit messages follow best practices
• Meets the Tekton contributor standards

Release Notes

Modernize kaniko Task to v1 API with osscontainertools/kaniko fork, add StepAction, CI/CD workflows, e2e tests, and full repository scaffolding.

[tekton-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[Copilot]

Pull request overview

This PR modernizes the tektoncd-catalog/kaniko repository to a newer Tekton Pipelines API and aligns the repo layout/tooling with other catalog repos by adding generated StepAction artifacts, e2e coverage, and release automation.

Changes:

• Updated the kaniko Task to tekton.dev/v1, switched to ghcr.io/osscontainertools/kaniko, and added multi-arch metadata plus parameterization updates.
• Added a generated StepAction plus generator scripts to keep Task and StepAction in sync.
• Introduced e2e test runners and repository scaffolding (docs, OWNERS, license, release tooling, ArtifactHub metadata).

Reviewed changes

Copilot reviewed 20 out of 21 changed files in this pull request and generated 10 comments.

Show a summary per file

File	Description
test/e2e-tests.sh	Adds an e2e runner that installs Tekton, installs the Task, and runs a validating build via a PipelineRun.
test/e2e-bundle-test.sh	Adds an e2e runner that pushes a bundle and validates bundle-resolver execution.
task/kaniko/tests/run.yaml	Removes legacy v1beta1 test Pipeline/PipelineRun manifests.
task/kaniko/tests/resources.yaml	Removes legacy PVC test resource.
task/kaniko/tests/pre-apply-task-hook.sh	Removes legacy pre-apply hook logic (sidecar registry + git-clone injection).
task/kaniko/README.md	Refreshes Task documentation for the new API/image and streamlined usage/auth docs.
task/kaniko/kaniko.yaml	Modernizes the Task to v1, updates executor image/defaults, and adjusts parameters/args/env.
task/artifacthub-repo.yaml	Adds ArtifactHub repository metadata for the Task.
stepaction/kaniko/README.md	Adds generated StepAction documentation derived from the Task.
stepaction/kaniko/kaniko.yaml	Adds the generated StepAction YAML (source-of-truth is the Task + generator).
stepaction/artifacthub-repo.yaml	Adds ArtifactHub repository metadata for the StepAction.
README.md	Adds top-level repository README with installation and links to docs.
OWNERS	Adds Prow OWNERS configuration for approvals/merges.
LICENSE	Adds Apache 2.0 license text.
hack/release.sh	Adds a release automation script (version bump, regenerate, commit, tag, push).
hack/generate-stepaction.sh	Adds a wrapper to run the StepAction generator.
hack/generate-stepaction.py	Adds generator logic to derive StepAction YAML from the Task YAML.
DEVELOPMENT.md	Documents repo architecture, generation flow, testing, and release process.
CONTRIBUTING.md	Adds contribution workflow and CI expectations.
AGENTS.md	Adds agent guidance emphasizing Task-as-source-of-truth and StepAction generation rules.
.gitignore	Ignores the signing key path used by release/bundle signing workflows.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[vdemeester]

Addressed the Copilot review feedback in 8601c1c:

Valid points fixed:

• KANIKO_DIR description corrected — it's the kaniko working directory (buildcontext, stages, layers, caches, docker config), not a binary location. Verified against pkg/config/init.go.
• Docker config in the StepAction now uses ${KANIKO_DIR}/.docker instead of hardcoded /kaniko/.docker (matches DockerConfigDir = KanikoDir + "/.docker/" in kaniko source).
• Executor binary path hardcoded to /kaniko/executor — KanikoExeDir is determined by os.Executable() (where the binary lives in the image), not KANIKO_DIR. So ${KANIKO_DIR}/executor would break if KANIKO_DIR is overridden.
• Version label aligned to 0.1.0 (three-component semver, matching git-clone and golang repos).

Already fixed in previous commit:

• Dead TaskRun with invalid stepTemplate/volumes fields removed from e2e test.

Not changing:

• Task dockerconfig workspace mountPath stays hardcoded /kaniko/.docker — mountPath doesn't support param substitution, and PR #1385 upstream uses the same approach.