Skip to content

v1.4.3

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Jul 14:56
Immutable release. Only release title and notes can be modified.
v1.4.3
baaefd3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

KubeLB Community Edition 1.4.3

Release Notes

For detailed release notes and changelog: 1.4.3 release notes

Docker Images 
docker pull quay.io/kubermatic/kubelb-manager:v1.4.3
docker pull quay.io/kubermatic/kubelb-ccm:v1.4.3
Helm Charts 
# kubelb-manager
helm pull oci://quay.io/kubermatic/helm-charts/kubelb-manager --version v1.4.3

# kubelb-ccm
helm pull oci://quay.io/kubermatic/helm-charts/kubelb-ccm --version v1.4.3

# kubelb-addons
helm pull oci://quay.io/kubermatic/helm-charts/kubelb-addons --version v0.4.0
SBOMs

Binary SBOMs (from release assets):

curl -LO https://github.com/kubermatic/kubelb/releases/download/v1.4.3/kubelb_1.4.3_linux_amd64.sbom.spdx.json
curl -LO https://github.com/kubermatic/kubelb/releases/download/v1.4.3/ccm_1.4.3_linux_amd64.sbom.spdx.json

Container image SBOMs (OCI artifacts):

# kubelb-manager
SBOM_DIGEST=$(oras discover --format json --artifact-type application/spdx+json \
  quay.io/kubermatic/kubelb-manager:v1.4.3 | jq -r '.referrers[0].digest')
oras pull quay.io/kubermatic/kubelb-manager@${SBOM_DIGEST} --output sbom/

# kubelb-ccm
SBOM_DIGEST=$(oras discover --format json --artifact-type application/spdx+json \
  quay.io/kubermatic/kubelb-ccm:v1.4.3 | jq -r '.referrers[0].digest')
oras pull quay.io/kubermatic/kubelb-ccm@${SBOM_DIGEST} --output sbom/

Verify SBOM attestation:

cosign verify-attestation quay.io/kubermatic/kubelb-manager:v1.4.3 \
  --type spdxjson \
  --certificate-identity-regexp="^https://github.com/kubermatic/kubelb/.github/workflows/release.yml@refs/tags/v.*" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

cosign verify-attestation quay.io/kubermatic/kubelb-ccm:v1.4.3 \
  --type spdxjson \
  --certificate-identity-regexp="^https://github.com/kubermatic/kubelb/.github/workflows/release.yml@refs/tags/v.*" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
Verify Signatures

Docker images:

cosign verify quay.io/kubermatic/kubelb-manager:v1.4.3 \
  --certificate-identity-regexp="^https://github.com/kubermatic/kubelb/.github/workflows/release.yml@refs/tags/v.*" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

cosign verify quay.io/kubermatic/kubelb-ccm:v1.4.3 \
  --certificate-identity-regexp="^https://github.com/kubermatic/kubelb/.github/workflows/release.yml@refs/tags/v.*" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Helm charts:

cosign verify quay.io/kubermatic/helm-charts/kubelb-manager:v1.4.3 \
  --certificate-identity-regexp="^https://github.com/kubermatic/kubelb/.github/workflows/release.yml@refs/tags/v.*" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

cosign verify quay.io/kubermatic/helm-charts/kubelb-ccm:v1.4.3 \
  --certificate-identity-regexp="^https://github.com/kubermatic/kubelb/.github/workflows/release.yml@refs/tags/v.*" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

cosign verify quay.io/kubermatic/helm-charts/kubelb-addons:v0.4.0 \
  --certificate-identity-regexp="^https://github.com/kubermatic/kubelb/.github/workflows/release.yml@refs/tags/addons-v.*" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

SBOM attestations:

cosign verify-attestation quay.io/kubermatic/kubelb-manager:v1.4.3 \
  --type spdxjson \
  --certificate-identity-regexp="^https://github.com/kubermatic/kubelb/.github/workflows/release.yml@refs/tags/v.*" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

cosign verify-attestation quay.io/kubermatic/kubelb-ccm:v1.4.3 \
  --type spdxjson \
  --certificate-identity-regexp="^https://github.com/kubermatic/kubelb/.github/workflows/release.yml@refs/tags/v.*" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Release checksums:

cosign verify-blob --bundle checksums.txt.sigstore.json checksums.txt \
  --certificate-identity-regexp="^https://github.com/kubermatic/kubelb/.github/workflows/release.yml@refs/tags/v.*" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
Tools
  • Cosign - Container signing
  • ORAS - OCI Registry As Storage

For detailed release notes and changelog: 1.4.3 release notes

Assets 17
Loading