This documentation is for a release that is no longer maintained
See documentation for the latest supported version.Chapter 2. New features and enhancements
This section lists new features and feature enhancements available in Red Hat Trusted Application Pipeline 1.3.
Bitbucket Cloud is now supported
You can now choose Bitbucket Cloud as your Git repository hosting service to create components in RHTAP applications. You can combine source code from different Git platforms (GitHub, GitLab, and Bitbucket) to build an application. To use Bitbucket, integrate it during the RHTAP installation and then configure it using the Setting up Bitbucket guide.
GitLab CI is now supported
You can now use GitLab CI as your CI provider. To use it, integrate GitLab during the RHTAP installation and then configure GitLab CI to ensure secure CI/CD workflows. Additionally, you can choose to customize GitLab pipelines. If you don’t integrate GitLab CI, RHTAP defaults to Tekton.
Technology Preview: GitHub Actions is now supported
You can now choose GitHub Actions as your CI provider. You can integrate GitHub Actions during the RHTAP installation, otherwise, RHTAP defaults to Tekton. This feature is available as a Technology Preview, and it is not fully supported, may not be functionally complete, and is not intended for production use.
JFrog Artifactory is now supported
You can now choose JFrog Artifactory as your container images registry when you create your application. To use Artifactory, refer to the Integrating JFrog Artifactory section in the Installation guide. If you don’t integrate JFrog Artifactory, RHTAP defaults to Quay.
Technology Preview: A new software template is now available
RHTAP introduces a new secure software template called Import User Repository. It allows you to import code from the existing Git repository and create a new repository that includes software supply chain security functionality provided by RHTAP. To learn more, view the Bring your source template on GitHub. Note that this is a Technology Preview feature.
Changes to the RHTAP installation
The RHTAP installer now includes all the resources needed for RHTAP deployment in the single binary to simplify installation. The new installer also provides extra monitoring to watch over Kubernetes resource status for improved reliability during installation.
- To install RHTAP 1.3, refer to the Installation guide.
-
To customize the installation, refer to Customizing config.yaml.
Changes to the MinIO installation
Installing MinIO through OpenShift OperatorHub subscription is no longer available. As a result, the Operator will no longer update the MinIO installation automatically.
In Red Hat Trusted Application Pipeline 1.3, MinIO is still installed automatically, however now the MinIO Operator Helm chart is used. It allows you to customize the RHTAP installation process.
SBOMs are now automatically uploaded to RHTPA
RHTAP now automatically publishes your software bill of materials (SBOM) to Red Hat Trusted Profile Analyzer when you use any of the supported CI providers: Tekton, Jenkins, GitLab CI or GitHub Actions. Note that GitHub Actions is a Technology Preview feature and has not been fully tested.
If you prefer, you can extract the SBOM manually by referring to Inspecting your SBOM with RHTPA.