v0.50.6

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.6/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.6/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.6/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.6/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.6/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.6/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:3cead02490923568114691444b2ad7b5883948461fdd6b8e2c89e156bf407e47
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:3364d1229cd0fcf8ffa81653786b8da2c3eb40627a60dfe926eb90d7cc28e38a

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:3cead02490923568114691444b2ad7b5883948461fdd6b8e2c89e156bf407e47 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:3364d1229cd0fcf8ffa81653786b8da2c3eb40627a60dfe926eb90d7cc28e38a --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Fixed Incorrect URL for kapp controller install instruction by @devanshuVmware in #1619

Full Changelog: v0.50.5...v0.50.6

📂 Files Checksum

94d0a61c7c254262562a40103e40f775aa6000bb3e11660b0582c2d0696c8985  ./release.yml
fcf0ca77df0b33e598a9df467a53da8ba50ba71a1bdaeab048832824dd0ec902  ./kctrl-darwin-amd64
be2e3579f12e6df72e2fbe4a943a2d7ec372c102bfc5fd75bad22ceb77b8d12c  ./kctrl-darwin-arm64
789de8f69498a2625a9753c66c7c528b919c9ab82ad0bc8c69bf09f8df007c5d  ./kctrl-linux-amd64
624c44c4a711a9c7cd0133ae39da77d5d6788ebd0c03af90f469cb345ab85bd5  ./kctrl-linux-arm64
c411a55e675893d3ee274c7fc49538d5933425a244178e85214f41a6b714bdec  ./kctrl-windows-amd64.exe
05193b54ecd32b010651dd64e56be49af94d3603f84e50741a3176ea91e2f177  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml