v0.55.0

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.55.0/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.55.0/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.55.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.55.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.55.0/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.55.0/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:4c9802cb8d9fe3617169ce1d4338c187d6d00ddc88e796ba8d2c753cc356c3e3
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:f0a8589a98f2015cc3c6dd5b29d3aa7f3bf0e825b26a9c8cfa5dcc5c7f0e8cb9

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:4c9802cb8d9fe3617169ce1d4338c187d6d00ddc88e796ba8d2c753cc356c3e3 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:f0a8589a98f2015cc3c6dd5b29d3aa7f3bf0e825b26a9c8cfa5dcc5c7f0e8cb9 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Add tag cli args for pkg repo release by @devanshuVmware in #1664
• Bump golang version to 1.23.3

Full Changelog: v0.54.0...v0.55.0

📂 Files Checksum

8e9b3edaa5f2467f838118bc67abe4eb24ab09c42d61dbde017534723e23fcf6  ./release.yml
6b6ce86d5cfba186e25f6de085787eefa4937465fe56de0470d359749a205119  ./kctrl-darwin-amd64
e4ebf09da2ebc6d7afbe1167cf75de9f5191b534750db3809ef837cbad364002  ./kctrl-darwin-arm64
d7dfb3b306d957486e14631e3aa6f5a4c7dfc8892bde5eb1a233635b188c0b2a  ./kctrl-linux-amd64
a1c51fa4ca40a6041b4b9d01e7fe8103fc2081b2dca3231104504bd3f0a06b8c  ./kctrl-linux-arm64
708945a105e0534d0e116929072076f3cd1b0f02f63ba35ca6f17af3d558bf38  ./kctrl-windows-amd64.exe
dde86dadcd0e4d28ef9801367a67735e9ee1a81b24fed7df2cc5e4e68e44865e  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml