v0.50.0

✨ What's new

• Do not overwrite kapp deploy status during delete by @praveenrewar in #1460
• adding option for skipping SSL verification when using Git by @sethiyash in #1419
• Don't use a string as the OpenAPI default value for Helm values with an empty object default by @gcapizzi in #1449
• Make sure array Helm values always get an items field in OpenAPI schema by @gcapizzi in #1465
• Expose metrics to report time taken in fetch/template/deploy phase of app, pkgi, pkgr by @sethiyash in #1415
• Remove options that can be manipulated downstream by @100mik in #1462
• Adding os environment keys to cmd environment by @rcmadhankumar in #1391
• Make bits of kctrl more configurable by @100mik in #1426
• updating default value for apply-timeout option for kapp to 5mins by @prembhaskal in #1435
• Bumped grpc 1.58.3 by @kumaritanushree in #1446
• Signature verification added, release notes automated by @rcmadhankumar in #1463
• Return user friendly error when package doesn't exist by @rcmadhankumar in #1322
• changed e2e Tests Retry to iteration count by @jignyasamishra in #1453

🔈 Callouts

• @prembhaskal made their first contribution in #1435
• @jignyasamishra made their first contribution in #1453
• @gcapizzi made their first contribution in #1449

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.0/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.0/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.0/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.0/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:72fd8e970300d4ddd3202a201064055a4bf24a992c15451e46dbd19e38a07b9e
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:2df4288136228f2f9c0101987ae12a29aabe33963cafde8359055899583a5130

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:72fd8e970300d4ddd3202a201064055a4bf24a992c15451e46dbd19e38a07b9e --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:2df4288136228f2f9c0101987ae12a29aabe33963cafde8359055899583a5130 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

Full Changelog: v0.49.0...v0.50.0

📂 Files Checksum

3f17b2bbe557ee01a27197263dd74cdb2e5ef06be011a397562bbff861caf01c  ./release.yml
739ed102ffce01a42e84bf1bc82bd2901e95d438dd701e789c578899119c385e  ./kctrl-darwin-amd64
876e74d5d142bedb008540d09961161618ce10490f4a9b718618b63b9cd8fc5f  ./kctrl-darwin-arm64
617a4e3ad2e247feb09857086d796065dad4df73cb81dc59d1aa7bfa4a9aff07  ./kctrl-linux-amd64
957a17fff540e40c60387682beb96de3b4444ebf222b5d771f8a1881d4bea65a  ./kctrl-linux-arm64
4ba17619028d91218529c66de14ac90ef208acfe1dbbe5bfe1e82d12094e2492  ./kctrl-windows-amd64.exe
d76a69554641d018e8723e87e144bc1edd1f7a74a5e057a74c85bb8a042ef876  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml