v0.59.2

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.2/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:ff4368366d7bd932acd80133138144166831ed25f08fb3a563c1256e1d9da933
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:98f6510b17f8f3028d325ba33e72eba259e8b434a51761fe04f2102d4558aeef

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:ff4368366d7bd932acd80133138144166831ed25f08fb3a563c1256e1d9da933 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:98f6510b17f8f3028d325ba33e72eba259e8b434a51761fe04f2102d4558aeef --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Bump golang 1.25.7 by @sameerforge in #1784
• Bump Carvel Dependencies by @CodesbyUnnati in #1789

New Contributors

• @sameerforge made their first contribution in #1784

Full Changelog: v0.59.1...v0.59.2

📂 Files Checksum

101988693b9a8215b5353dc871e95f095fc59eaab8ce2acc6da3be8ef39b235b  ./release.yml
5da30f0f61837bf4df57c85ac455b4714351d4110fe9612763a2b1100e676691  ./kctrl-darwin-amd64
25d3c21f588ee5d339f96da210ad955f3958ea4bcfe6b36e2cb473ddfce0e6d3  ./kctrl-darwin-arm64
38d0da769836ec9b4a556ed88937c2357928d701c708ceb034bd04fc94a77872  ./kctrl-linux-amd64
b5690024b2a11149c0ed3c4c07b4a070abae76bdb2eb102f0c042ee0ebd8e354  ./kctrl-linux-arm64
41b31b0d60eb1f93f573e29f292f6cc439ca80e15203cca318a82800f81d7aaf  ./kctrl-windows-amd64.exe
f30a8cc9d1fb747efe563d5694428e1c7aa07e229a79ab79dd38a0a32752922c  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml