kollect 0.7.0-rc.1
Pre-release0.7.0-rc.1 - 2026-06-13
Bug Fixes
-
release: Tolerate Rekor 409 on asset re-sign 94de025
-
sink/nats: Reconnect when cached connection is closed 319a2bf
-
sink/bigquery: Snapshot emulator mode in Config 4c58988
Features
-
webhook: Reject cluster kinds in tenantMode 3dbfd6b
-
controller: Classify forbidden static refs for cluster kinds ae3057d
-
api: [breaking] Reference namespaced static config from cluster kinds 9753744
Container image (operator)
ghcr.io/konih/kollect:0.7.0-rc.1
Multi-arch (linux/amd64, linux/arm64), Debian bookworm-slim nonroot base (includes git and openssh-client for spec.git.engine: cli).
OCI attestations (SBOM + SLSA provenance) are attached in GHCR and on the repository
Attestations page. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/konih/kollect/.+' \
ghcr.io/konih/kollect@sha256:05fe500edf271489def67e61dc7f456f54983e83471f56ff4f5d226b806dcf7eContainer image (kollect-ui)
Optional read-only UI SPA — enable with Helm ui.enabled=true.
ghcr.io/konih/kollect-ui:0.7.0-rc.1
Multi-arch (linux/amd64, linux/arm64), nginx alpine static server.
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/konih/kollect/.+' \
ghcr.io/konih/kollect-ui@sha256:b3c4169f0c72475e0abdfbcc1e0788e0eedd47d5c321dcbe830db1ca37977178Install (Kustomize)
kubectl apply -f install-crds.yaml
kubectl apply -f install.yamlInstall (Helm — OCI)
helm upgrade --install kollect oci://ghcr.io/konih/kollect \
--version 0.7.0-rc.1 \
--namespace kollect-system \
--create-namespace \
--set image.repository=ghcr.io/konih/kollect \
--set image.tag=0.7.0-rc.1 \
--set ui.image.tag=0.7.0-rc.1Install (Helm — GitHub Release tarball)
helm upgrade --install kollect kollect-0.7.0-rc.1.tgz \
--namespace kollect-system \
--create-namespace \
--set image.repository=ghcr.io/konih/kollect \
--set image.tag=0.7.0-rc.1 \
--set ui.image.tag=0.7.0-rc.1Verify checksums with sha256sum -c checksums.txt. Each release asset includes a
<file>.sigstore.json Sigstore bundle; release-provenance.intoto.jsonl attests all assets.
See docs/RELEASE.md.