v0.54.1

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.54.1/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.54.1/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.54.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.54.1/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.54.1/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.54.1/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:3f57748314829516ea51e0765d5a6c82d7a2a3b4bc5a9b500c473fe65e6ba942
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:0d8261ab27a3e3bdb45d9c64dc7fb8b132cb83476776ad96943ded156d13e336

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:3f57748314829516ea51e0765d5a6c82d7a2a3b4bc5a9b500c473fe65e6ba942 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:0d8261ab27a3e3bdb45d9c64dc7fb8b132cb83476776ad96943ded156d13e336 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Update Golang version to 1.23.3 by @devanshuVmware in #1654

Full Changelog: v0.54.0...v0.54.1

📂 Files Checksum

e707034197cabcf1cab6599dce5e00ca0b99559c4528644ade07f33baa1b5b12  ./release.yml
cc8282b7919cadab1032d68450d5c5a965b8c4b3f8f393aaf4f39cf2eeee8204  ./kctrl-darwin-amd64
f5c1c6b15e3118bad2e6db3229a32fe853b68ffb6f5572f17cdedab4146fb060  ./kctrl-darwin-arm64
8105ca2150436848e76327933f1ba7703a3197c74e624a712d336866de92072a  ./kctrl-linux-amd64
157728fb39e5f047dbfcf6b28fd84f6075da30751dd0a363e56f3622b7f054fa  ./kctrl-linux-arm64
5e28e35d15f14b2d01517fa41517a312a8ba1a89d106722246cabfbd3ebe091b  ./kctrl-windows-amd64.exe
49311ecd5c0bad88c9480cb75c257ebf29ca731c4af7baa591f5a36e4bd6c1c2  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml