v0.60.3

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:610a14076cfe8864cd0bd961277b8c239298ab418234a1a8c324f2f5792c9b1d
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:4c28e4680fa1aabff1383995fbc709575f88ac8f11282291aac984839a72954b

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:610a14076cfe8864cd0bd961277b8c239298ab418234a1a8c324f2f5792c9b1d --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:4c28e4680fa1aabff1383995fbc709575f88ac8f11282291aac984839a72954b --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• chore(deps): bump kbld from v0.48.1 to v0.49.1 by @nikhilsagotiya in #1838

New Contributors

• @nikhilsagotiya made their first contribution in #1838

Full Changelog: v0.60.2...v0.60.3

📂 Files Checksum

86f5e641c20695b80352b65c1168be3c3c8ac1debe39363e634d30a7605e3043  ./release.yml
82da273c5ededd4b5650298f7f42d5932e5a382de828b5421665764a72070821  ./kctrl-darwin-amd64
69e5b21829070ea721415f9e4bc36fb0c06400548b31fd9fb52e97b4864e7f3f  ./kctrl-darwin-arm64
4d7738e8dcb823f17fd01a7d317be9fba66b0be6d621051a472426becdf6b6b2  ./kctrl-linux-amd64
d288687683847fae237c41a15657a758c967eba73cf546cba9bbcea2f6589304  ./kctrl-linux-arm64
b66c9e94ec9d9f50ba255e250ee5ebfb1f2cb1f285f44968baabe1df16f48de6  ./kctrl-windows-amd64.exe
2a47099114190f92e2dc9fc3d18edfd37da014dcc092ff8f17037f1208d47061  ./package.yml
bec808997ec2d4478942a4a44cdbbf28a326732ea59a12b32d537bda0df13d3b  ./package-metadata.yml