"rerun" of pipelineRun in OpenShift, doesn't clear annotations

[mtcolman]

Hi, I'm still doing some further testing, with which I'll update this ticket, but wondered @lcarva if you've seen anything around the annotatations of a pipelineRun where attestation is marked as Failed - if I rerun this pipelineRun (using the "rerun" button in OpenShift), then before the pipelineRun has completed, I can see the annotation chains.tekton.dev/signed: false is not cleared and attestation is not uploaded to repo.

I think I have all secrets etc in the right place.

Thanks in advance.

[lcarva]

This is probably not something that should be handled at the Chains level.

See tektoncd/pipeline#6127.

[mtcolman]

OK, thanks. Do you think it's something maybe the documentation needs to call out? e.g., rerun of pipelineRun that has been marked with these annotations will not work correctly/give ambiguous results? Or is this something that is known, but I've missed?

[lcarva]

+1 to adding something to the docs!