Complete migration out of Prow #3183
Description
Summary
Umbrella issue tracking the complete migration away from Prow. The Prow
cluster on OCI currently provides the merge queue (Tide), PR bot plugins,
and label sync for the tektoncd org.
Key enabler: Pipelines-as-Code (PaC) is moving into the tektoncd org
with an instance on the OCI cluster, which can serve as the backbone for
many of these replacements.
Workstreams
Merge Queue
- Migrate Terraform branch protection to repository rulesets #3181 — Migrate Terraform branch protection to repository rulesets
- Replace Tide merge queue with GitHub Merge Queue #3177 — Replace Tide with GitHub Merge Queue
CI Jobs (mostly done)
- Move remaining prow jobs to GitHub Actions #2842 — Move remaining Prow jobs to GitHub Actions
- Move nightly builds to GHA and reduce frequency #2670 — Move nightly builds to GHA
Slash Commands & Bot Plugins
- Migrate slash commands from GitHub Actions to dogfooding cluster #3121 — Migrate
/retest,/cherry-pick,/rebaseto dogfooding - Migrate Prow slash-command plugins to Tekton / PaC #3178 — Migrate Prow slash-command plugins (
/approve,/lgtm,
/hold,/assign,/label, etc.) - Replace Prow automated PR plugins with lightweight tasks or services #3179 — Replace automated PR plugins (
size,verify-owners,wip,
release-note,blunderbuss,needs-rebase)
Infrastructure
- Migrate label sync from Prow to Tekton CronJob or Terraform #3180 — Migrate label sync to CronJob or Terraform
- Decommission the Prow cluster and infrastructure #3182 — Decommission Prow cluster
Related
- Implement label check for "kind/*" using GHA #2841 — Implement label check for
kind/*using GHA
Approach
- PaC + GitHub Merge Queue as the primary replacement stack
- Tekton tasks on OCI cluster for operations needing cluster access
- Reusable GHA workflows in plumbing for simple, stateless checks
- Terraform for declarative configuration (branch protection, labels)
- Incremental migration — pilot on low-traffic repos, then roll out
/cc @tektoncd/plumbing-maintainers