v0.53.1

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.53.1/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.53.1/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.53.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.53.1/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.53.1/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.53.1/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:da1ac76b07c0961ec0a1573615cb8c121fd0a4c443a0bb7f73780242d05161f0
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:3d0a4b6be92b0037248b99195b7776e8e39e3e073999c6a44efda9e7587f85b8

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:da1ac76b07c0961ec0a1573615cb8c121fd0a4c443a0bb7f73780242d05161f0 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:3d0a4b6be92b0037248b99195b7776e8e39e3e073999c6a44efda9e7587f85b8 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Update dependencies by @rohitagg2020 in #1615

Full Changelog: v0.53.0...v0.53.1

📂 Files Checksum

d09229fec56445e891d586236f56802a7b3b7b7db69ef3410f3c4e2d3abc9a8c  ./release.yml
a04c9e50130c0822d5b940aca1d3031fd6d3e065c907d70cd7b33b91199ff521  ./kctrl-darwin-amd64
08b0e63e3f2948ae9ef108d1c0407ffe1c0c35eb635c0347bb0b17263b24e353  ./kctrl-darwin-arm64
008e8543a1389ab29a75470a6f602b569e28fa866f72ddb214df32d57e09ed1c  ./kctrl-linux-amd64
3536d4fce287e8979d1c93d44309cf86db88e720b416e38f9346ddc5dfd95b28  ./kctrl-linux-arm64
e89a7b3c402c554397ad8a9169e92d878a978e1d857c59f3c29fb05f46d55c57  ./kctrl-windows-amd64.exe
d63f30752b629ea056af037d32e03975e95858476e875c751a963dd34627ad0e  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml