v0.51.2

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.2/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.2/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.51.2/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.51.2/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:56f4675eff64fba3d4524b8617bb4c3839a9d05b97014d8e7a02b63f37e0f6b7
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:c200581ffcdb7106cf5a65ed0d42b7e9d2870655d32a8c11534f5543b1ab5811

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:56f4675eff64fba3d4524b8617bb4c3839a9d05b97014d8e7a02b63f37e0f6b7 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:c200581ffcdb7106cf5a65ed0d42b7e9d2870655d32a8c11534f5543b1ab5811 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Bump dependencies by @devanshuVmware in #1597

Full Changelog: v0.51.1...v0.51.2

📂 Files Checksum

7a1618d8bdedff2cc2a1d1339c6b88b011bc9794aee1e6c8c005fd8549723d8a  ./release.yml
572393e641ef43455a093790bff328be44182389f2b48c071cf8f778f56b4db7  ./kctrl-darwin-amd64
1c4f354e33f9a0fc2c708979deb33e132a56a279f85e59a4f4f284e1249d9ac4  ./kctrl-darwin-arm64
f7baed2f35f751c6c92d03ff8d9f2d0239ac1d711ed3ac215c0c26cdf8774043  ./kctrl-linux-amd64
7e837eedd7419507d8882f2a0d4a6588d66984a1b88058daeec1524fe36b9d31  ./kctrl-linux-arm64
81761e7f65652d2f479231e73706a79b24dfa1eb047bb934cbf4d0a678963911  ./kctrl-windows-amd64.exe
0daaedc87bd8537095b288cd579878a258d9b4a89197fea0ccb3c2b7d3eb810f  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml