v0.60.8

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.8/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.8/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.8/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.8/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.8/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.8/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:657de16580accaaa6ca967bd7a187c4d5f64e33c69f7c093d521cfc75e7aa047
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:14337a78199d1b4c51bf12066b7b18f9d76c90481a4d6d60e24973ba48f98cba

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:657de16580accaaa6ca967bd7a187c4d5f64e33c69f7c093d521cfc75e7aa047 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:14337a78199d1b4c51bf12066b7b18f9d76c90481a4d6d60e24973ba48f98cba --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• ci: force minikube to use docker runtime to fix buildx 404 errors by @himsngh in #1857
• implement OpenAPIModelName to fix SSA of data.packaging.carvel.dev types by @chappjc in #1856

New Contributors

• @chappjc made their first contribution in #1856

Full Changelog: v0.60.7...v0.60.8

📂 Files Checksum

ec000197e285fea2bddc25209fb8827bf3f852feeaccd8f3de9895a3ef0a3aa0  ./release.yml
6315b0b189a9c01c4f1daf782dfdbf43a4dc2ba83b06cfa4e93e8d8b6eccb789  ./kctrl-darwin-amd64
04f5a7350a9343d91d19c75dae0dc46546ca00df9954bcc8ea0dd4c6f633f49a  ./kctrl-darwin-arm64
0d909461445bc43775a821e95a80e129cc914a4bc9e118afe5ccd6cc565dccb2  ./kctrl-linux-amd64
1964484d2d432fbac03acaad9c6bd0fcd759c6084ea2978631bf8a6070b52406  ./kctrl-linux-arm64
157e0f7d41112891d24d532c4bcaa6890198fed02e662c3a5218914dad553109  ./kctrl-windows-amd64.exe
80289574bdbb93e6977ea32102a564bbb5b06fdbae30fc99fcd0c73d7bbbc96d  ./package.yml
bec808997ec2d4478942a4a44cdbbf28a326732ea59a12b32d537bda0df13d3b  ./package-metadata.yml