v0.50.3

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.3/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.3/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.3/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.3/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:24a956903de274649e19f836479a20350a098fa70e5347b4a2ca1dc91a0883fc
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:cb9be46e67cd79d73da6fe6237781a4971f82088e5f37221dab281088b1b4e9b

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:24a956903de274649e19f836479a20350a098fa70e5347b4a2ca1dc91a0883fc --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:cb9be46e67cd79d73da6fe6237781a4971f82088e5f37221dab281088b1b4e9b --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• Set seccompProfile to RuntimeDefault for both containers for 0.50.x. by @rohitagg2020 in #1526
• Bumping go version to 1.21.9 in v0.50.x line by @sethiyash in #1540

Full Changelog: v0.50.2...v0.50.3

📂 Files Checksum

896c2cae809d9875d8ff91fd77893bca9b49def4210ad3d171ec30a0b2f07f80  ./release.yml
560c5a4c52f5e8f13602bf887989b7fc6a65fd0c82de379eb24ae4d691263b77  ./kctrl-darwin-amd64
bff3337e0854147d2061297a1f62d65cabaac9a367880c611fecdd018c708175  ./kctrl-darwin-arm64
b09f5adbf197d7519f3278381df0bb3001922a58f76afd8b6f814afcdf418201  ./kctrl-linux-amd64
2b0c8cb02f5e50bdf0253007161652a43d45597416ca46987f371f77de079fb8  ./kctrl-linux-arm64
ba9964803d5ea93346421dbd921ae3aeb29d121f8cb72f600d4b429009a9ee13  ./kctrl-windows-amd64.exe
7bd1b7b39e24d6001e1a59828d448dec0493a6d5aaa99f67ff55f01ca877a2d9  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml