v0.50.4

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.4/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.4/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.4/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.4/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.4/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.4/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:2a6daa93d94aebe414203da86a004e40ca2def33e50d57e2644d7ff4cdd36ac1
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:de1d113e5a40d164d9e4a72c5f9bf97288e966517e000a224be0e32ce5cd9bcc

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:2a6daa93d94aebe414203da86a004e40ca2def33e50d57e2644d7ff4cdd36ac1 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:de1d113e5a40d164d9e4a72c5f9bf97288e966517e000a224be0e32ce5cd9bcc --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• Bumping helm version to 3.14.4 in v0.50.x line by @rohitagg2020 in #1567

Full Changelog: v0.50.3...v0.50.4

📂 Files Checksum

1281499cc635087d4d55ae53e5d3f99597a83fc4486edf872daaf9e9812cfcb9  ./release.yml
b48776f399537e51e35232459b7b9d93f2590e0d036692c1522b595e4577948e  ./kctrl-darwin-amd64
779480c0bbe01d06f6a803ca35a059a2bd5470085b4bf8b65b73ee43360e76ba  ./kctrl-darwin-arm64
3af04f9e8c40fd5ebff2c91a924dbd2815e537f1c8732fa2bd7963df2167795b  ./kctrl-linux-amd64
83cb8745420c44c1fefa377161b5d8cbe6dbe0874a6a0e2d3d0729b5b6f52a54  ./kctrl-linux-arm64
b952fc9a1b04086773020c090c8560d4d7a0469ec6987c040e0db101e13967a3  ./kctrl-windows-amd64.exe
49890bc0be866b67c38ddf7a02c2c85b236bf5a06047154c7824d3238bd2c5ab  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml