v0.50.5

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.5/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.5/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.5/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.5/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.5/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.5/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:d0cfb16343114064d8d6d78a2aa6b5e4112f921744f9edf5cf7ff66bca27a616
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:4c8786d670bc5111edcd711e5d6628edef51bdf3ab6ed4a7453d46f0fc5a0aa5

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:d0cfb16343114064d8d6d78a2aa6b5e4112f921744f9edf5cf7ff66bca27a616 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:4c8786d670bc5111edcd711e5d6628edef51bdf3ab6ed4a7453d46f0fc5a0aa5 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• Bumping dependencies by @devanshuVmware in #1596

Full Changelog: v0.50.4...v0.50.5

📂 Files Checksum

69ed9280284b258f45a68afb4929f3e8e2eb1aa26b1498853425b140e42dcad9  ./release.yml
cef462e3d5778f303c51951d81e28ce3a6014105bf21cd3d7813a2911b26834a  ./kctrl-darwin-amd64
942e1e4c0289f4f9e71b991fe0d1e113b6fef3448b5fdd32c3d0c6b549e1f535  ./kctrl-darwin-arm64
f55f54eb0711dc5e7972801316044663a48ac4b6569bcb9f7e682a92e6c85b40  ./kctrl-linux-amd64
3c233ee05a28932f74bca9e9350f01922114f1fcc91067fe7a056f4e471b206a  ./kctrl-linux-arm64
646d0b444ae1924ee6b84e6a6b08861a402d8e10ee633a7c523703dec07c8cf4  ./kctrl-windows-amd64.exe
f64cb915ae5e3d1ca558e229ea5cc295d1fd7b248c2f8c437f2e79227a989e65  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml