refactor: use TaskRun directly, drop Pipeline wrapper

Pipeline was a pass-through wrapping one Task — unnecessary indirection.
CI now creates TaskRun directly against the integration-test Task.

.gitea/workflows/ci.yaml

@@ -72,30 +72,30 @@ jobs:
           RUN_NAME="integration-test-${SHA}"
 
           # Clean up any previous run with the same name
-          kubectl delete pipelinerun "${RUN_NAME}" -n api --ignore-not-found
+          kubectl delete taskrun "${RUN_NAME}" -n api --ignore-not-found
 
-          # Create PipelineRun — spins up gateway sidecar + curl tests
+          # Create TaskRun — spins up gateway sidecar + curl tests
           cat <<YAML | kubectl create -f -
           apiVersion: tekton.dev/v1
-          kind: PipelineRun
+          kind: TaskRun
           metadata:
             name: ${RUN_NAME}
             namespace: api
             labels:
               commit-sha: "${SHA}"
           spec:
-            pipelineRef:
+            taskRef:
-              name: integration-test-pipeline
+              name: integration-test
             params:
             - name: image
               value: "${IMAGE}:${SHA}"
           YAML
 
-          echo "✓ PipelineRun created: ${RUN_NAME}"
+          echo "✓ TaskRun created: ${RUN_NAME}"
 
           # Wait for completion (Succeeded or Failed)
           echo "Waiting for tests (timeout 5m)..."
-          if kubectl wait pipelinerun/"${RUN_NAME}" -n api \
+          if kubectl wait taskrun/"${RUN_NAME}" -n api \
                --for=condition=Succeeded --timeout=5m 2>/dev/null; then
             echo "result=pass" >> $GITHUB_OUTPUT
           else
@@ -105,12 +105,13 @@ jobs:
           # Print logs + results
           echo ""
           echo "=== Test Logs ==="
-          kubectl logs -n api "pipelinerun/${RUN_NAME}" --all-containers 2>/dev/null || true
+          POD=$(kubectl get pod -n api -l tekton.dev/taskRun=${RUN_NAME} -o name | head -1)
+          kubectl logs -n api "${POD}" -c step-run-tests 2>/dev/null || true
           echo ""
-          REASON=$(kubectl get pipelinerun "${RUN_NAME}" -n api \
+          REASON=$(kubectl get taskrun "${RUN_NAME}" -n api \
             -o jsonpath='{.status.conditions[0].reason}')
-          SUMMARY=$(kubectl get pipelinerun "${RUN_NAME}" -n api \
+          SUMMARY=$(kubectl get taskrun "${RUN_NAME}" -n api \
-            -o jsonpath='{.status.results[?(@.name=="test-summary")].value}')
+            -o jsonpath='{.status.results[?(@.name=="summary")].value}')
           echo "Status: ${REASON}"
           echo "Summary: ${SUMMARY}"
 

k8s/tekton/ci-rbac.yaml

@@ -15,12 +15,9 @@ metadata:
   name: ci-tekton-trigger
   namespace: api
 rules:
-- apiGroups: ["tekton.dev"]
-  resources: ["pipelineruns"]
-  verbs: ["create", "get", "list", "watch", "delete"]
 - apiGroups: ["tekton.dev"]
   resources: ["taskruns"]
-  verbs: ["get", "list"]
+  verbs: ["create", "get", "list", "watch", "delete"]
 - apiGroups: [""]
   resources: ["pods", "pods/log"]
   verbs: ["get", "list"]

k8s/tekton/kustomization.yaml

@@ -6,7 +6,6 @@ namespace: api
 resources:
 - ci-rbac.yaml
 - task-integration-test.yaml
-- pipeline-integration-test.yaml
 
 generatorOptions:
   disableNameSuffixHash: true

k8s/tekton/pipeline-integration-test.yaml

@@ -1,30 +0,0 @@
-apiVersion: tekton.dev/v1
-kind: Pipeline
-metadata:
-  name: integration-test-pipeline
-  namespace: api
-  labels:
-    app: api-gateway
-    component: testing
-spec:
-  description: >
-    Run integration tests against a gateway image.
-    Spins up the image as a sidecar, tests via curl, reports pass/fail.
-  params:
-  - name: image
-    type: string
-    description: "Container image to test (repo:sha)"
-  results:
-  - name: test-result
-    description: "pass or fail"
-    value: $(tasks.integration-test.results.result)
-  - name: test-summary
-    description: "e.g. 8/8 passed"
-    value: $(tasks.integration-test.results.summary)
-  tasks:
-  - name: integration-test
-    taskRef:
-      name: integration-test
-    params:
-    - name: image
-      value: $(params.image)