v0.60.9

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.9/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.9/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.9/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.9/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.9/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.9/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:4b2202dbc1cdcba4514aea10da6f83845b78bc6e3280d73cb01607a913a518f8
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:97dbea9fe3cfa2263042567055b8f48c725552ddaaec10e29a833d4957f84fe8

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:4b2202dbc1cdcba4514aea10da6f83845b78bc6e3280d73cb01607a913a518f8 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:97dbea9fe3cfa2263042567055b8f48c725552ddaaec10e29a833d4957f84fe8 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• ci: load kapp-controller image into minikube instead of using docker-env by @himsngh in #1859
• fix package template mutation by @gorkemozlu in #1862
• Bump dependencies by @carvel-bot in #1847
• Fix TLS authority case sensitivity and kctrl error message grammar/formatting by @sameerforge in #1863

New Contributors

• @gorkemozlu made their first contribution in #1862

Full Changelog: v0.60.8...v0.60.9

📂 Files Checksum

19a2984ba32d5992195886465d7d48dde8dab2bd9a3d9b04ff6ee1d8dea60e70  ./release.yml
6329d858ff5d7e9e3e711e93f149ddf4146922ae95d4baa5fb5f15eebcb1f2b3  ./kctrl-darwin-amd64
37086f4721b175dc6f53f6a9fff908bce1ad50e2683a4f7f9fb8928a16ade0ed  ./kctrl-darwin-arm64
842ea6448d712b103e60b2e2acd91ddc7bda7ba789793af793d7899a64e2c2b0  ./kctrl-linux-amd64
478fb543a435a5761c303a1929bd8f81cab475d03abec06a6b4902121e1d86e1  ./kctrl-linux-arm64
f85da71063324a522f270e027d1cb1bdbf0a194aae944d3d380a0978951e2e20  ./kctrl-windows-amd64.exe
ee404327acfef558c0c9bb52be0441b788b41406265161712cc8feaf19896bbb  ./package.yml
bec808997ec2d4478942a4a44cdbbf28a326732ea59a12b32d537bda0df13d3b  ./package-metadata.yml