Skip to content

v0.52.0

Compare
Choose a tag to compare
@github-actions github-actions released this 13 May 05:34
· 20 commits to develop since this release
e081d6a

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.52.0/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.52.0/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.52.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.52.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.52.0/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.52.0/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

  • ghcr.io/carvel-dev/kapp-controller@sha256:b83bd139c42777bb4428c2ae421f93675a7d6147dff3147471d1be112d9c1eec
  • ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:2f18114d24b1c6d5aff1395bec8873c5177fec672f6c45c9c49eb83a6bdc1e58

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:b83bd139c42777bb4428c2ae421f93675a7d6147dff3147471d1be112d9c1eec --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:2f18114d24b1c6d5aff1395bec8873c5177fec672f6c45c9c49eb83a6bdc1e58 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

  • The go module name is changed to carvel.dev/kapp-controller by #1390 by @joaopapereira in #1557
    • 🚨 For library users 🚨 note that this is a breaking change on this version, no impact for users that only use the binaries

Full Changelog: v0.51.0...v0.52.0

📂 Files Checksum

4deb3b2a3f579666daa0ee5a289a85dc0da35274d244035e7d2bedc95997b92f  ./release.yml
2e631dbaea16186bb6cec158d781748705ea425bd2e89d0a6c173f8ca2be3ca9  ./kctrl-darwin-amd64
4ad82f494d00aba3aa2e471a8721d2dde14e5390064230d418041f693f4bf1dc  ./kctrl-darwin-arm64
355e239fd2c8fe952620c301792098b4bcaebdd965d760a1a8283dd0824a3782  ./kctrl-linux-amd64
1959ba7885afb826c3f8760e69cb28a8b8917cb84075c85791c841d8f8f52c94  ./kctrl-linux-arm64
67d4c82c803553cc0ebdb7e9a3c142ca0d65b8685de310e19d9f6d9cdaad5af1  ./kctrl-windows-amd64.exe
e69ca728ee463cc2507bba91279ab986ff1e07e837165d669221462894311e50  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml