v0.1.0-rc.5

Kova v0.1.0-rc.5 publishes one matched release set: cross-platform CLI archives, the OCI Helm chart, and controller, runner, and worker images.

Highlights

• Adds provider-neutral S3 credential providers for static values, projected Secret files, and explicit anonymous access. File credentials are reread so Kubernetes Secret projection updates can rotate credentials without restarting Kova.
• Adds a production-oriented Helm values baseline with release-matched role images, TokenReview authentication, S3-backed artifacts, and highly available worker capacity.
• Adds exact-version public artifact verification for the CLI, checksums, Helm chart, role images, and an S3-backed Service lifecycle in a fresh kind cluster.
• Tightens public documentation, release metadata, repository governance, and provider-neutral test fixtures.

Install

Choose this exact prerelease version:

export KOVA_VERSION=v0.1.0-rc.5
helm show crds oci://ghcr.io/cofy-x/charts/kova \
  --version "${KOVA_VERSION#v}" | kubectl apply -f -
helm upgrade --install kova oci://ghcr.io/cofy-x/charts/kova \
  --version "${KOVA_VERSION#v}" \
  --namespace kova --create-namespace --wait

Install the CLI with Go:

go install github.com/cofy-x/kova/cmd/kova@v0.1.0-rc.5

Verify downloaded assets with checksums.txt. Apply the selected release CRDs before every Helm upgrade because Helm does not upgrade CRDs from a chart's crds/ directory.

Full changelog: v0.1.0-rc.4...v0.1.0-rc.5

v0.1.0-rc.4

Kova v0.1.0-rc.4 is a prerelease focused on completing the managed Service
workflow and validating the published artifact set.

Highlights:

• Adds authenticated, owner-aware Service jobs with submit, list, wait, logs,
  results, cancellation, retention, and cleanup flows.
• Adds multi-target batch Service jobs and verifies pushed image descriptors
  before reporting success.
• Adds S3-compatible artifact storage and an end-to-end MinIO lifecycle gate.
• Strengthens TokenReview and SubjectAccessReview RBAC boundaries.
• Validates upgrade and rollback behavior, public chart pulls, role-specific
  runtime images, checksums, SBOMs, and build provenance before publication.

Install the matching public chart:

export KOVA_VERSION=v0.1.0-rc.4
helm show crds oci://ghcr.io/cofy-x/charts/kova \
  --version "${KOVA_VERSION#v}" | kubectl apply -f -
helm upgrade --install kova oci://ghcr.io/cofy-x/charts/kova \
  --version "${KOVA_VERSION#v}" \
  --namespace kova \
  --create-namespace \
  --wait

Apply the selected release CRDs before every Helm upgrade because Helm does not
upgrade files from a chart's crds/ directory. Verify downloaded CLI and chart
assets with checksums.txt.

Full changelog:
v0.1.0-rc.3...v0.1.0-rc.4

v0.1.0-rc.3

Full Changelog: v0.1.0-rc.2...v0.1.0-rc.3

v0.1.0-rc.2

Full Changelog: v0.1.0-rc.1...v0.1.0-rc.2

v0.1.0-rc.1

Full Changelog: https://github.com/cofy-x/kova/commits/v0.1.0-rc.1