v0.21.0

Installation and signature verification

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.21.0/checksums.txt
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.21.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.21.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Installation of secretgen-controller

secretgen-controller can be installed by using kapp

kapp deploy -a sg -f https://github.com/carvel-dev/secretgen-controller/releases/v0.21.0/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/secretgen-controller/releases/v0.21.0/download/release.yml

Container Images

secretgen-controller and secretgen-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/secretgen-controller@sha256:8f46b3fd0b2ad8b623e7990ca2844a99dabdbfc480c861c018367796ec4fd89b
• ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:f746018d77e12618abf58381f9199a885fc57efd93b7ded82dbd01ebcb1e62ca

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying secretgen-controller image
cosign verify ghcr.io/carvel-dev/secretgen-controller@sha256:8f46b3fd0b2ad8b623e7990ca2844a99dabdbfc480c861c018367796ec4fd89b --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying secretgen-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:f746018d77e12618abf58381f9199a885fc57efd93b7ded82dbd01ebcb1e62ca --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's New

• Upgrade to Go 1.26 and Kubernetes client libraries v0.36.0, adding native support for Kubernetes 1.36 control planes by @sameerforge in #743

🔧 Dependency & Runtime Bumps

• Go Toolchain: Upgraded to 1.26
• Kubernetes API Stack: Upgraded to v0.36.0 (enabling full compatibility with native Kubernetes 1.36 clusters)

Full Changelog: v0.20.1...v0.21.0

📂 Files Checksum

af95e9bd670c4b906acc5685725dd92c13714a873aadb18dd4b4d8e0858d00fd  ./release.yml
ce778d92ab7802878d8376f4dbb180d5d36fb14a878b8b11543e62dbc924b6a5  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml