v0.51.3

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.3/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.3/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.3/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.3/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:80f5ff5a2f2e030a8e5798e9919c00abfd23b4ba672dd854c0c27d4eaf769b18
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:eb161072db8014b262acd33641aea01432f59af046fd71e6e043cb7117bb52a1

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:80f5ff5a2f2e030a8e5798e9919c00abfd23b4ba672dd854c0c27d4eaf769b18 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:eb161072db8014b262acd33641aea01432f59af046fd71e6e043cb7117bb52a1 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Fix Incorrect URL for kapp controller install instruction by @devanshuVmware in #1620

Full Changelog: v0.51.2...v0.51.3

📂 Files Checksum

c4c176ad62cb1fba708bd55d4a670d8b6258d77d67b7e6a2ef5c8a1073a463ba  ./release.yml
e2bfbad57dcc0731418c5479cc177d6a5b1e7abe028ab108810e2036741e010e  ./kctrl-darwin-amd64
e9cda39b601dd8f1338a10c921821cb9fb790814107fd9769def39666305600c  ./kctrl-darwin-arm64
00194617ddafe83ffb1dbe3048709dcb26562f48032568deba2811e80dcaaac0  ./kctrl-linux-amd64
3be24f8d0bed89935d8964c88bc7e34b4b71a7bc65ca4839de160e18dc7b1adf  ./kctrl-linux-arm64
5999a4bf3158185973ae3ff0a015e981b420966e92ed55e84a3461d4e7b2dbc2  ./kctrl-windows-amd64.exe
e1bf1f8678e9b3fb2650b97ec0fed56dd5b47f882c945bd544b02ec272a24b88  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml