v0.56.1

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.56.1/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.56.1/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.56.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.56.1/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.56.1/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.56.1/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:009899e04dfe72636b819d8db572c00d37f8c8da098262d630600964a37325c3
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:e1dce848011ce345eccd91d45ade2fa817ad467a3dde38f0ef37204eb1956200

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:009899e04dfe72636b819d8db572c00d37f8c8da098262d630600964a37325c3 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:e1dce848011ce345eccd91d45ade2fa817ad467a3dde38f0ef37204eb1956200 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Fix version of kctrl by @joaopapereira in #1710

Full Changelog: v0.56.0...v0.56.1

📂 Files Checksum

5d830a1c520a4798c960f8638fc3979135fe6d23b02c637717a4c161f59cc695  ./release.yml
0cc78563d79c2efc04187d909ea253a762cb974492b6983d804ea16f6a07e52f  ./kctrl-darwin-amd64
eb73bfb06383b88b85a882c9bce080f965c3eabeed735b63709c27ae25e463ed  ./kctrl-darwin-arm64
0adb8e1060fbd3b9cc7c4f926863732ac0be2ae1e746e7232f0e5cd61da00b34  ./kctrl-linux-amd64
43a11bed3e52028b268aa101cc546c915adc5bc3ab586bdad01a6f4fde554bd1  ./kctrl-linux-arm64
ea305c725f548ea09f83e89c8f8fb5b8138dc09b2da9598b703d385895eb8555  ./kctrl-windows-amd64.exe
628d24a4b745009009cf141e12bd942605bda0aa16d0e01e606529c7ad1a23f1  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml