v0.60.4

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:13707f03d9fae30048ffeb64210dbdaec8cbc0b6c72180b60377efaf1b7bbef9
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:a70ee6feb5c67eaf06342e87536c67adc231ecadd8897136ca86220b7af95aad

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:13707f03d9fae30048ffeb64210dbdaec8cbc0b6c72180b60377efaf1b7bbef9 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:a70ee6feb5c67eaf06342e87536c67adc231ecadd8897136ca86220b7af95aad --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• [1839] Fix: Truncate status.deploy.stdout as it can exceed etcd's limit on large clusters, causing reconciliation delay by @himsngh in #1840
• fix: stop forwarding WatchList options to internal CRD watch by @sameerforge in #1845

Full Changelog: v0.60.3...v0.60.4

📂 Files Checksum

01e40658b13e0affef482010731c60535ae906924f170c998fad2a4da12ac112  ./release.yml
734fcb6bcf5f7de4694a9627071f9296dbb6535c2d03b599a2c1e46dbd00a49b  ./kctrl-darwin-amd64
74962b279a9302d9cc137678d55c9173163abffb1a968e35a7ab2310a3843fb5  ./kctrl-darwin-arm64
7b88d7bbdd0059175e7608284b291a935555abc71575b951063a3ce2bdc408ad  ./kctrl-linux-amd64
f9f7ef17c8447523aa7f239168fae2933bdf8ca849c48ec4385806047647a26a  ./kctrl-linux-arm64
29d90f45e3ca446cab9defcab26ab34d8d256bfaab0f5b7734c5676af943027c  ./kctrl-windows-amd64.exe
dca8f1c8c47b76ee6c2205e80a0b97bfe7cf53074e0f6ae5e403f9ccd38c5777  ./package.yml
bec808997ec2d4478942a4a44cdbbf28a326732ea59a12b32d537bda0df13d3b  ./package-metadata.yml

v0.60.3

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.3/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:610a14076cfe8864cd0bd961277b8c239298ab418234a1a8c324f2f5792c9b1d
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:4c28e4680fa1aabff1383995fbc709575f88ac8f11282291aac984839a72954b

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:610a14076cfe8864cd0bd961277b8c239298ab418234a1a8c324f2f5792c9b1d --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:4c28e4680fa1aabff1383995fbc709575f88ac8f11282291aac984839a72954b --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• chore(deps): bump kbld from v0.48.1 to v0.49.1 by @nikhilsagotiya in #1838

New Contributors

• @nikhilsagotiya made their first contribution in #1838

Full Changelog: v0.60.2...v0.60.3

📂 Files Checksum

86f5e641c20695b80352b65c1168be3c3c8ac1debe39363e634d30a7605e3043  ./release.yml
82da273c5ededd4b5650298f7f42d5932e5a382de828b5421665764a72070821  ./kctrl-darwin-amd64
69e5b21829070ea721415f9e4bc36fb0c06400548b31fd9fb52e97b4864e7f3f  ./kctrl-darwin-arm64
4d7738e8dcb823f17fd01a7d317be9fba66b0be6d621051a472426becdf6b6b2  ./kctrl-linux-amd64
d288687683847fae237c41a15657a758c967eba73cf546cba9bbcea2f6589304  ./kctrl-linux-arm64
b66c9e94ec9d9f50ba255e250ee5ebfb1f2cb1f285f44968baabe1df16f48de6  ./kctrl-windows-amd64.exe
2a47099114190f92e2dc9fc3d18edfd37da014dcc092ff8f17037f1208d47061  ./package.yml
bec808997ec2d4478942a4a44cdbbf28a326732ea59a12b32d537bda0df13d3b  ./package-metadata.yml

v0.60.2

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.2/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.2/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.2/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.2/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:e3b6a3937c3cae32c8bf742627dd1424e3bf50bf5c5fc6d62faee46905450c27
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:6e2f103cd047e850f06130a7f51f364151d641589b1f60d1cec6803ef581916c

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:e3b6a3937c3cae32c8bf742627dd1424e3bf50bf5c5fc6d62faee46905450c27 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:6e2f103cd047e850f06130a7f51f364151d641589b1f60d1cec6803ef581916c --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's Changed

• Fix: preserve SendInitialEvents in ListOptions for K8s v0.36.0 compatibility by @sameerforge in #1836
• Dependencies: Bumped golang.org/x/crypto to the latest version in both the root go.mod and cli/go.mod to ensure compatibility and security by @sameerforge in #1836

Full Changelog: v0.60.1...v0.60.2

📂 Files Checksum

da81280f855357f8e83c478d7a95352662bdcc561310323f9bfa04a75339d99c  ./release.yml
184cd3e1819e64dc0785ed9f285ab6fbbf475830c63538b73f7d84cbd257b249  ./kctrl-darwin-amd64
ae35d054b4ced49c509e67c9597ab7d8ae98b7d27e2e1144b31bf5004060a411  ./kctrl-darwin-arm64
f1d493bf05c771cb691f120ec7dc4f44fa4ffc8c211a57b3b8293a9131382402  ./kctrl-linux-amd64
438416f26db347bcdab57d3d62de8c9fcd82250d1340ed1fa8a70072fa294b6d  ./kctrl-linux-arm64
ced75b28e41c39d49a974e39d5e9e4dc59d3ae092b6e909c290f9d00b39bc135  ./kctrl-windows-amd64.exe
a7da2c3ade3eb4d7a639a2757306503d41bb7c06cc0ab688a2f2d6556a092abd  ./package.yml
bec808997ec2d4478942a4a44cdbbf28a326732ea59a12b32d537bda0df13d3b  ./package-metadata.yml

v0.60.1

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.1/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.1/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.1/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.1/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.1/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:f4f7f1f90d44151e319529bd1dfe65cd8c8e41c3ce6f21d7dd7f2e11379cabcb
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:3a67fda807dbc020f6e511850897d0d33c830ab044a055ef2bb46d633330f1d3

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:f4f7f1f90d44151e319529bd1dfe65cd8c8e41c3ce6f21d7dd7f2e11379cabcb --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:3a67fda807dbc020f6e511850897d0d33c830ab044a055ef2bb46d633330f1d3 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's Changed

• chore(deps): bump bump vendir , imgpkg, golang.org/x/mod to latest by @sameerforge in #1833
• chore(cli): bump vendir to v0.45.4, kapp-controller, and golang.org/x… by @sameerforge in #1834

Full Changelog: v0.60.0...v0.60.1

📂 Files Checksum

865aee6c9bfb6260b552d1fc4d5c10234474ff870bae6cecdbce6a3f0d60feaf  ./release.yml
f3213a846d008b2026fa4ed152a34c64fb0e8fe3b6c504d2d780c727139e0e2c  ./kctrl-darwin-amd64
02470ba400496bb7e64a547b6240749784ea77f6e4e64743cd8dd2aca481b57d  ./kctrl-darwin-arm64
b8dc24b66d13c1f3d8d46b4da50ad78660a309e7b705c8abf8320e26dc6e0b0f  ./kctrl-linux-amd64
45d1fd3d5f9f1b8d8ea8ee33a605ca9e068cf8f13b35fe36a47f1b5d4d71bc0a  ./kctrl-linux-arm64
2f012e6763809337825a1d736ba66cb3a0b7eb0de558fcc46e5c506ba15375c8  ./kctrl-windows-amd64.exe
341f464f2209fa55193448acaef315e638f6c576e845365dff65366b4a51c96d  ./package.yml
bec808997ec2d4478942a4a44cdbbf28a326732ea59a12b32d537bda0df13d3b  ./package-metadata.yml

v0.60.0

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.0/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.0/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.0/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.0/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:85dc8baf3aa49b23d7e05d408456304886993af5c01e627ed17d520100acd50a
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:09f087e8890f73f823d25ca0da0cfbdee98efc7b9b86d3bd4de3320789120ed9

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:85dc8baf3aa49b23d7e05d408456304886993af5c01e627ed17d520100acd50a --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:09f087e8890f73f823d25ca0da0cfbdee98efc7b9b86d3bd4de3320789120ed9 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's Changed

• Add version annotation to APIService to prevent race conditions during rolling upgrades by @mdzhigarov in #1813
• build(deps): update CLI framework and security dependencies by @sameerforge in #1822
• Update Kubernetes stack to v0.36.0, Go to 1.26.3, and k8s libs to v0.46.0 by @sameerforge in #1829
• Upgrade kctrl CLI dependencies to target Kubernetes v0.36.0 by @sameerforge in #1831

🔧 Dependency & Runtime Bumps

Go Toolchain: Upgraded to 1.26
Kubernetes API Stack: Upgraded to v0.36.0 (enabling full compatibility with native Kubernetes 1.36 clusters)

Full Changelog: v0.59.8...v0.60.0

📂 Files Checksum

903881e35c100f6bf709e70fef795c2ac8b13cff58a5698f01662473ee939263  ./release.yml
979e0fd406f443f091aad9f08998416487b3c847e722584942e77b45146035b0  ./kctrl-darwin-amd64
6d329f1245a0ff7eb15b0836879e308f77449d04f7f898d1f857631cfe5dd82b  ./kctrl-darwin-arm64
1422b58ef55cf023e2c30f069b4963ab2041420009fdb3c933b556d68acc2252  ./kctrl-linux-amd64
eaaaaba04d99eeb77aa7e48dff3d0b7458dc2f31a1019f55ebfc023d4bdf6cde  ./kctrl-linux-arm64
0eb931db6260c5dbdf73c0473fc7d05f375d133c1f5b6b315d30bcad18f0ec95  ./kctrl-windows-amd64.exe
84e98242b2c2356011bed58cd9bb107491a8773f3aaf7f9e6ca5f84ae3afa1e9  ./package.yml
bec808997ec2d4478942a4a44cdbbf28a326732ea59a12b32d537bda0df13d3b  ./package-metadata.yml

v0.59.8

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.8/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.8/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.8/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.8/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.8/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.8/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:873ba307aaf6fe9953f2ceeb6f30a30c37e2dff07e40405feef8ba38461df9da
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:b574646f9d5dd5d0826fc8697c49cc16d6a2556c45543393dfddf6ffd736adaa

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:873ba307aaf6fe9953f2ceeb6f30a30c37e2dff07e40405feef8ba38461df9da --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:b574646f9d5dd5d0826fc8697c49cc16d6a2556c45543393dfddf6ffd736adaa --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• Bump Vendir to v0.45.3 & Update root directory imports from k14s/semver to carvel-dev/semver. by @sameerforge in #1815
• Bump vendir & kbld dependencies & Align semver imports with root changes by @sameerforge in #1818

Full Changelog: v0.59.7...v0.59.8

📂 Files Checksum

33c8da108ce8732f14b7f90ef46eca01de894264d533046eccd1c3320d11d13e  ./release.yml
db441c820a5d1d686ce4540532e37cbf47543d7cb1fab5d965df0949707d6ad4  ./kctrl-darwin-amd64
456af6a4ad95ab87674b4c7dad6fbe53fa93b3d626ff56beda342eb09f81977f  ./kctrl-darwin-arm64
76a5f88d562b8ed751d7865f3e328e0b60e8e4682e5c59bae6223706881752ab  ./kctrl-linux-amd64
57059c6486d57d8df425fc79cf4b04d8a6c58d8936de83eedf94a809127d7d45  ./kctrl-linux-arm64
6b744df281391d81a14eb65c7e58087921956d6da45ba9f43467d872e3b4bc59  ./kctrl-windows-amd64.exe
f2b6352dfd196c4fac646d6a93ed50db83d26dca675a6c922729d357519099f8  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.59.7

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.7/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.7/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.7/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.7/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.7/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.7/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:66c23f160bebd70b782fbca976964bb45bc6db2de61fe60f40d0d378ce8f34e3
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:ca423ca836ae20d35dbd5e4b67ef0a4f41d1bdf57a1f13ecfd360266fd11b100

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:66c23f160bebd70b782fbca976964bb45bc6db2de61fe60f40d0d378ce8f34e3 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:ca423ca836ae20d35dbd5e4b67ef0a4f41d1bdf57a1f13ecfd360266fd11b100 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• fix(apiserver): register OpenAPI v2 spec for aggregation by @himsngh in #1803
• feat(apiserver): implement APIService caBundle reconciliation by @himsngh in #1808

New Contributors

• @himsngh made their first contribution in #1803

Full Changelog: v0.59.6...v0.59.7

📂 Files Checksum

837d376191eedfb127fa2968b342f25ba412ae64e4f62e5c3673f6e9ee7664d8  ./release.yml
baa96a29f9bd3ffdc6018fcde6eb56a0dd88d6eea2a6178d04f8de0ed4f450ed  ./kctrl-darwin-amd64
bf600514eaadef905a51d3e9547a74073272da5ee4712cf95e06d79b6f6afa39  ./kctrl-darwin-arm64
74df30b10d8575e1b59e71ccf22e844a321d2eb0a163d9e92371404c8b2e6fd8  ./kctrl-linux-amd64
577add084a82ad22664ce810e5a54ce09e30350fe74b646542d8ab51855a82bb  ./kctrl-linux-arm64
4fe5d95cf627ffe20644570fd53f0fd93d5d74f11000a6dbaae3275ee9dd3fd9  ./kctrl-windows-amd64.exe
936aeb21f728d13fd357de7874dbf55d18fd3f451d47a708d9b8231767990fc4  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.59.6

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.6/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.6/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.6/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.6/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.6/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.6/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:9f61958b67460200f8ad677b2860aa2d7df1d8181ccd276ec7997f3cac54c3ca
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:34bb3128c9203c5b89aa52d349d7179139501818754ea2ad09a7be0de7fcacca

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:9f61958b67460200f8ad677b2860aa2d7df1d8181ccd276ec7997f3cac54c3ca --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:34bb3128c9203c5b89aa52d349d7179139501818754ea2ad09a7be0de7fcacca --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• Fix zombie process race condition in sidecar container by @mdzhigarov in #1806
• Use v0.29.0 of buildkit in release process by @praveenrewar in #1810

Full Changelog: v0.59.3...v0.59.6

📂 Files Checksum

a92c047d2addc58165767366d95657672b4f8c344bb497c3c5b9919536cbc419  ./release.yml
249d054e7e790307cfa8b04f8655f1deac93c570a6533d521ab6b057a4b2c4ae  ./kctrl-darwin-amd64
a3679119576b4517bdd00f8b7d3b87678b364f8dd441b27d37518a63325b0234  ./kctrl-darwin-arm64
c4b0aa1985d4b00ff60e89e7e2ef3e11349f8878878f406c33febf8459b5dd2d  ./kctrl-linux-amd64
10fc4961e1188defb80bd000d01ad463065645a96a87b30a90abf10c28c84704  ./kctrl-linux-arm64
b1cd7c0c2bd6a2bb277af7715d50f92c6cd5248c794d1d23672d5410054740f8  ./kctrl-windows-amd64.exe
dd59c4a501e1ffa7f29adf466f1c0620b9aebaa44cb682a152bbcdd16a4e1c4a  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.59.3

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.3/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:f9f2a86926f0fe8eee07134fbfbcdc77da21e4db361cedd9483bde2941d89215
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:e3d2fc391d5d4653b6e9dad7b49192359de14c85bd1a4a32daeb90c4f56f4069

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:f9f2a86926f0fe8eee07134fbfbcdc77da21e4db361cedd9483bde2941d89215 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:e3d2fc391d5d4653b6e9dad7b49192359de14c85bd1a4a32daeb90c4f56f4069 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Downgrade helm from v4.1.1 to v3.19.5
• Update carvel kbld dependency to v0.47.2

Full Changelog: v0.59.2...v0.59.3

📂 Files Checksum

f9cc0cb7af6aa7330282cc65157f0e1c0b84fc829b42ba18f0342463109a9dcc  ./release.yml
5524ef6ec2ad87c8b6491275d344dcdec897973e9df20ce42dd11a7e958441e9  ./kctrl-darwin-amd64
8f8016c4ce351e1065811c491dcb687174d82efe8b6205bcd9552582d9e86bc3  ./kctrl-darwin-arm64
94ad503a023c5df10095e72f681f0fc564ffed361538ce666db21ed11958ee01  ./kctrl-linux-amd64
06b41d8bd1313610be2412be971af01abd89f0a41befc27f51331defcec7adf8  ./kctrl-linux-arm64
3f7f2dd35ba78b4ac069d13c0a0b26ca422cf164a996e17a71072c675d0fd1a7  ./kctrl-windows-amd64.exe
81c5f515063a48964c87e8de1789d5278afe18a851f2bed02715e293cc0aa7b7  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.59.2

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:ff4368366d7bd932acd80133138144166831ed25f08fb3a563c1256e1d9da933
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:98f6510b17f8f3028d325ba33e72eba259e8b434a51761fe04f2102d4558aeef

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:ff4368366d7bd932acd80133138144166831ed25f08fb3a563c1256e1d9da933 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:98f6510b17f8f3028d325ba33e72eba259e8b434a51761fe04f2102d4558aeef --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Bump golang 1.25.7 by @sameerforge in #1784
• Bump Carvel Dependencies by @CodesbyUnnati in #1789

New Contributors

• @sameerforge made their first contribution in #1784

Full Changelog: v0.59.1...v0.59.2

📂 Files Checksum

101988693b9a8215b5353dc871e95f095fc59eaab8ce2acc6da3be8ef39b235b  ./release.yml
5da30f0f61837bf4df57c85ac455b4714351d4110fe9612763a2b1100e676691  ./kctrl-darwin-amd64
25d3c21f588ee5d339f96da210ad955f3958ea4bcfe6b36e2cb473ddfce0e6d3  ./kctrl-darwin-arm64
38d0da769836ec9b4a556ed88937c2357928d701c708ceb034bd04fc94a77872  ./kctrl-linux-amd64
b5690024b2a11149c0ed3c4c07b4a070abae76bdb2eb102f0c042ee0ebd8e354  ./kctrl-linux-arm64
41b31b0d60eb1f93f573e29f292f6cc439ca80e15203cca318a82800f81d7aaf  ./kctrl-windows-amd64.exe
f30a8cc9d1fb747efe563d5694428e1c7aa07e229a79ab79dd38a0a32752922c  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml