v0.59.3

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:f9f2a86926f0fe8eee07134fbfbcdc77da21e4db361cedd9483bde2941d89215
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:e3d2fc391d5d4653b6e9dad7b49192359de14c85bd1a4a32daeb90c4f56f4069

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:f9f2a86926f0fe8eee07134fbfbcdc77da21e4db361cedd9483bde2941d89215 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:e3d2fc391d5d4653b6e9dad7b49192359de14c85bd1a4a32daeb90c4f56f4069 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Downgrade helm from v4.1.1 to v3.19.5
• Update carvel kbld dependency to v0.47.2

Full Changelog: v0.59.2...v0.59.3

📂 Files Checksum

f9cc0cb7af6aa7330282cc65157f0e1c0b84fc829b42ba18f0342463109a9dcc  ./release.yml
5524ef6ec2ad87c8b6491275d344dcdec897973e9df20ce42dd11a7e958441e9  ./kctrl-darwin-amd64
8f8016c4ce351e1065811c491dcb687174d82efe8b6205bcd9552582d9e86bc3  ./kctrl-darwin-arm64
94ad503a023c5df10095e72f681f0fc564ffed361538ce666db21ed11958ee01  ./kctrl-linux-amd64
06b41d8bd1313610be2412be971af01abd89f0a41befc27f51331defcec7adf8  ./kctrl-linux-arm64
3f7f2dd35ba78b4ac069d13c0a0b26ca422cf164a996e17a71072c675d0fd1a7  ./kctrl-windows-amd64.exe
81c5f515063a48964c87e8de1789d5278afe18a851f2bed02715e293cc0aa7b7  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml