v0.60.4

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:13707f03d9fae30048ffeb64210dbdaec8cbc0b6c72180b60377efaf1b7bbef9
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:a70ee6feb5c67eaf06342e87536c67adc231ecadd8897136ca86220b7af95aad

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:13707f03d9fae30048ffeb64210dbdaec8cbc0b6c72180b60377efaf1b7bbef9 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:a70ee6feb5c67eaf06342e87536c67adc231ecadd8897136ca86220b7af95aad --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• [1839] Fix: Truncate status.deploy.stdout as it can exceed etcd's limit on large clusters, causing reconciliation delay by @himsngh in #1840
• fix: stop forwarding WatchList options to internal CRD watch by @sameerforge in #1845

Full Changelog: v0.60.3...v0.60.4

📂 Files Checksum

01e40658b13e0affef482010731c60535ae906924f170c998fad2a4da12ac112  ./release.yml
734fcb6bcf5f7de4694a9627071f9296dbb6535c2d03b599a2c1e46dbd00a49b  ./kctrl-darwin-amd64
74962b279a9302d9cc137678d55c9173163abffb1a968e35a7ab2310a3843fb5  ./kctrl-darwin-arm64
7b88d7bbdd0059175e7608284b291a935555abc71575b951063a3ce2bdc408ad  ./kctrl-linux-amd64
f9f7ef17c8447523aa7f239168fae2933bdf8ca849c48ec4385806047647a26a  ./kctrl-linux-arm64
29d90f45e3ca446cab9defcab26ab34d8d256bfaab0f5b7734c5676af943027c  ./kctrl-windows-amd64.exe
dca8f1c8c47b76ee6c2205e80a0b97bfe7cf53074e0f6ae5e403f9ccd38c5777  ./package.yml
bec808997ec2d4478942a4a44cdbbf28a326732ea59a12b32d537bda0df13d3b  ./package-metadata.yml