v0.53.0

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.53.0/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.53.0/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.53.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.53.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.53.0/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.53.0/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:2368019cd18fdd82c08c48f5ba7cf6c2df50e35d7e92a16ec1f36c97538985f3
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:9a39f5df36e21514b5d86e6c02849186a3b0f1b72c68651b70d73f2babde6835

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:2368019cd18fdd82c08c48f5ba7cf6c2df50e35d7e92a16ec1f36c97538985f3 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:9a39f5df36e21514b5d86e6c02849186a3b0f1b72c68651b70d73f2babde6835 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Added partial support for DownwardsAPI with kctrl package release command by @100mik in #1580
• Add defaults for version flag while installing packages using kctrl by @100mik in #1588
• Bumping dependencies and golang by @rohitagg2020 in #1600

Full Changelog: v0.52.0...v0.53.0

📂 Files Checksum

2457bed3b40c46ede4f8c44823dcf5eb05cc4cd1e8b30da05348df4aac2864c7  ./release.yml
0bee8254d2055bc833a197c777d2d79efc06c675c821da196765dacdae5ebeb0  ./kctrl-darwin-amd64
70a2cb40122f4ac750fb21d9e741e056344fcc463e38c7b9981f5a2fdd74bef6  ./kctrl-darwin-arm64
9c33cfaae971718221c44feeca85faa703e7399f2e9d3fc98c9b1160ee765fb3  ./kctrl-linux-amd64
0e8fde1c937c1ad49dd42de8f4a9a41ccbeb3514ced8c83ad15dc04e3f2a9a96  ./kctrl-linux-arm64
b276621bfd1857ed0c841e96f3d4c17de1e450609f227ad3b882af0cc13d7c5f  ./kctrl-windows-amd64.exe
883313f4580e7f45865b1a438fba2c3b9c142cd8bb6fb626dfa861ee58b3a335  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml