v0.60.10

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.10/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.10/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.10/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.10/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.10/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.10/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:4e082a26dced093b4c6ca4d7b896cda5b839d6dc506fc4c0ab443507621f472c
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:b994dff88321ca77b210d3fe54d05768895076d74a6d9f28cc6e63cb086927c0

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:4e082a26dced093b4c6ca4d7b896cda5b839d6dc506fc4c0ab443507621f472c --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:b994dff88321ca77b210d3fe54d05768895076d74a6d9f28cc6e63cb086927c0 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• Bump dependencies by @carvel-bot in #1866
• Bump dependencies by @carvel-bot in #1867
• Improve error messages and add credential redaction for subprocess output by @sameerforge in #1872

Full Changelog: v0.60.9...v0.60.10

📂 Files Checksum

2064796dd6e60325f16b27d9a21a8b7ba1683f8f736474c13a05a766fd64ebc1  ./release.yml
fc2b9af6b517730a3e910f31481459017f341de67e6f736867a4e2ab3d3996ad  ./kctrl-darwin-amd64
75ce9d3e49212062e9d9740e719d7b0235242cf7fdc1ea3c207b29f95de38e3f  ./kctrl-darwin-arm64
f397167dbc4be71267e1f70aaf362ce69739c69aa237c010abb132b3630628a5  ./kctrl-linux-amd64
aca7b5dda05d00027afcf1a0192772f52e68efc71c0392904968b0d4f398a39d  ./kctrl-linux-arm64
b568f0c67ee7ccd7d49d8095c9e6380a9d1905c9ca4b9aff0ad6dbbe0e538afe  ./kctrl-windows-amd64.exe
731e9764567643fa468c3c995fc41f3a1bc0cea3bb079ceb87b13cea88c120bb  ./package.yml
bec808997ec2d4478942a4a44cdbbf28a326732ea59a12b32d537bda0df13d3b  ./package-metadata.yml