Build entrypoint image for Windows

go.mod

@@ -19,7 +19,7 @@ require (
 	github.com/jenkins-x/go-scm v1.10.10
 	github.com/mitchellh/go-homedir v1.1.0
 	github.com/pkg/errors v0.9.1
-	github.com/tektoncd/plumbing v0.0.0-20210514044347-f8a9689d5bd5
+	github.com/tektoncd/plumbing v0.0.0-20211012143332-c7cc43d9bc0c
 	go.opencensus.io v0.23.0
 	go.uber.org/multierr v1.7.0 // indirect
 	go.uber.org/zap v1.19.1

hack/tools.go

@@ -4,6 +4,7 @@ package tools
 
 import (
 	_ "github.com/tektoncd/plumbing"
+	_ "github.com/tektoncd/plumbing/cmd/combine"
 	_ "github.com/tektoncd/plumbing/scripts"
 
 	_ "k8s.io/code-generator/cmd/client-gen"

tekton/publish.yaml

@@ -27,7 +27,7 @@ spec:
       default: "true"
     - name: platforms
       description: Platforms to publish for the images (e.g. linux/amd64,linux/arm64)
-      default: linux/amd64,linux/arm64,linux/s390x,linux/ppc64le
+      default: linux/amd64,linux/arm64,linux/s390x,linux/ppc64le,windows/amd64
     - name: serviceAccountPath
       description: The name of the service account path within the release-secret workspace
   workspaces:
@@ -61,19 +61,26 @@ spec:
   steps:
 
   - name: create-ko-yaml
-    image: busybox
+    image: golang:1.16
     script: |
       #!/bin/sh
       set -ex
 
+      # Combine Distroless with a Windows base image, used for the entrypoint image.
+      COMBINED_BASE_IMAGE=$(go run ./vendor/github.com/tektoncd/plumbing/cmd/combine/main.go \
+        gcr.io/distroless/base:debug-nonroot \
+        mcr.microsoft.com/windows/nanoserver:1809 \
+        ${CONTAINER_REGISTRY}/$(params.package)/combined-base-image:latest)
+
       cat <<EOF > ${PROJECT_ROOT}/.ko.yaml
       # This matches the value configured in .ko.yaml
       defaultBaseImage: gcr.io/distroless/static:nonroot
       baseImageOverrides:
-        $(params.package)/cmd/git-init: ${CONTAINER_REGISTRY}/$(params.package)/git-init-build-base:latest
+        # Use the combined base image for entrypoint.
+        $(params.package)/cmd/entrypoint: ${COMBINED_BASE_IMAGE}
 
+        $(params.package)/cmd/git-init: ${CONTAINER_REGISTRY}/$(params.package)/git-init-build-base:latest
         # These match values configured in .ko.yaml
-        $(params.package)/cmd/entrypoint: gcr.io/distroless/base:debug-nonroot
         $(params.package)/cmd/pullrequest-init: ${CONTAINER_REGISTRY}/$(params.package)/pullrequest-init-build-base:latest
       EOF