Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.64.0/kapp-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp
# Make the binary executable
chmod +x /usr/local/bin/kapp
Via Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version
Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.64.0/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.64.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.64.0/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com
Verify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing
✨ What's new
- Make ownership override allowed apps flag dangerous by @100mik
- Add filter for apps for which ownership can be overriden by @100mik
- Adding timeout in waitRules by @rohitagg2020 in #994
- Providing startTime and currentTime to facilitate timeout in case of ytt wait rules by @rohitagg2020 and @praveenrewar in #1023
- Show actual log during custom wait rule if asked specifically by @rohitagg2020 in #1038
- Bump Go version to 1.23.3 by @devanshuVmware in #1039
Full Changelog: v0.63.0...v0.64.0
📂 Files Checksum
0daa557bf6b00f99c187219b7765dc758a16801f5db462b88479d55aaae9b008 ./kapp-darwin-amd64
14207d33130e833d201f2cd6e3e87435fb8b9534298843ed3c00fe7cda5221df ./kapp-linux-amd64
1c23dd0108db458ed1cd6b18b013073e3cea51195b5cc076efaef803320c2fd4 ./kapp-windows-amd64.exe
ee25c54f54d7035f0f74b85cd33cea6d81e8f172e0a70288d0b3e4335caff54e ./kapp-darwin-arm64
fc7617107fa87480e6326c1cdf2c62708f455c9d96f8e9550fb5e848c296cc80 ./kapp-linux-arm64