MKurator 0.12.0

0.12.0 - 2026-07-08

Bug Fixes

• validation: Satisfy lint for v1beta1 admission 2fd2371

Features

• webhook: Add v1beta1 validating admission 077d607

• samples: Default sample CRs to v1beta1 (8d-4) 402457c

• webhook: Conversion webhook for v1beta1 hub (8d-2) 37b5fc4

• api: Scaffold v1beta1 types and multi-version CRDs (8d-1) (#71) (#71, )037b0f3

Refactoring

• webhook: Split v1beta1 envtest suite 6c6f050

---

Container image

ghcr.io/conduit-ops/mkurator:0.12.0

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
  ghcr.io/conduit-ops/mkurator@sha256:35619561c0dc095c259ac744a27f2d9ee2e775f265ccd31381fe7f9e18bd062f

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
  --version 0.12.0 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.12.0

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.12.0.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.12.0

Verify checksums with sha256sum -c checksums.txt.