v0.51.2

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.2/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.2/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.51.2/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.51.2/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:56f4675eff64fba3d4524b8617bb4c3839a9d05b97014d8e7a02b63f37e0f6b7
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:c200581ffcdb7106cf5a65ed0d42b7e9d2870655d32a8c11534f5543b1ab5811

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:56f4675eff64fba3d4524b8617bb4c3839a9d05b97014d8e7a02b63f37e0f6b7 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:c200581ffcdb7106cf5a65ed0d42b7e9d2870655d32a8c11534f5543b1ab5811 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Bump dependencies by @devanshuVmware in #1597

Full Changelog: v0.51.1...v0.51.2

📂 Files Checksum

7a1618d8bdedff2cc2a1d1339c6b88b011bc9794aee1e6c8c005fd8549723d8a  ./release.yml
572393e641ef43455a093790bff328be44182389f2b48c071cf8f778f56b4db7  ./kctrl-darwin-amd64
1c4f354e33f9a0fc2c708979deb33e132a56a279f85e59a4f4f284e1249d9ac4  ./kctrl-darwin-arm64
f7baed2f35f751c6c92d03ff8d9f2d0239ac1d711ed3ac215c0c26cdf8774043  ./kctrl-linux-amd64
7e837eedd7419507d8882f2a0d4a6588d66984a1b88058daeec1524fe36b9d31  ./kctrl-linux-arm64
81761e7f65652d2f479231e73706a79b24dfa1eb047bb934cbf4d0a678963911  ./kctrl-windows-amd64.exe
0daaedc87bd8537095b288cd579878a258d9b4a89197fea0ccb3c2b7d3eb810f  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.51.1

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.1/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.1/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.1/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.51.1/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.51.1/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:bb72e77120569dcb9f51a6a65c9a91a8a4a56fedc1c2939c583dc458d716b718
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:265c7dfa7367384dc8e6d152985305d69425970b5f02ce626d5db8002f11199c

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:bb72e77120569dcb9f51a6a65c9a91a8a4a56fedc1c2939c583dc458d716b718 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:265c7dfa7367384dc8e6d152985305d69425970b5f02ce626d5db8002f11199c --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Updating dependencies by @rohitagg2020 in #1579

Full Changelog: v0.51.0...v0.51.1

📂 Files Checksum

32b4585a33beccd30e2d5409d9bdd2059c045f8dd059badf29913afaf7e6bd0a  ./release.yml
1afd2c7676f0f52b31fad067265fc407368b49d0451b5054a01d7228f773835f  ./kctrl-darwin-amd64
cbcfd347879c6e8b21ed9488a5ef4b43fd5818c40efba574d14d50b1de948b80  ./kctrl-darwin-arm64
99013610f7959d741be971d2fa917c705baec0e97e82aad35e067cdc284276fa  ./kctrl-linux-amd64
61aacd3143a73f97d7f190e1b692e7653951c51f1640f9e076a38712b7a81adc  ./kctrl-linux-arm64
b7e667dc652e8d1f059850aead71518468f42fbba8a3b2547652fc7ca0569629  ./kctrl-windows-amd64.exe
92916f0d9ea3a5f40aed2b861b6f63be4eb17757feae5fe3b5d873143363e025  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.51.0

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.0/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.0/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.51.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.51.0/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.51.0/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:6431627458a455aa3ef5f323ce07f7878aa6ae182a75bc709858d31d559fbba3
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:0b184aed340144ac2837685b400834b77538446497974b44fa3734a12b823bee

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:6431627458a455aa3ef5f323ce07f7878aa6ae182a75bc709858d31d559fbba3 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:0b184aed340144ac2837685b400834b77538446497974b44fa3734a12b823bee --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• fix-kctrl hangs when deleting package repository by @rcmadhankumar in #1469
• Set seccompProfile to RuntimeDefault for both containers. by @rohitagg2020 in #1467
• Do not wait for App pause on package install pause if wait is disabled by @100mik in #1474
• adding new column message in kctrl pkg installed list command by @prembhaskal in #1475
• Adds ability to force HTTP Basic when fetching from git repos by @joaopapereira in #1495
• Adding support for tag constraints when adding a package repo with kctrl by @sethiyash in #1471
• Handling invalid column names on kctrl list commands by @rcmadhankumar in #1502
• Change copyright notices to Carvel Authors by @bentito in #1506
• Consider path nestedness for all possible downward API values by @mamachanko in #1524
• Fixed column validation with KeyifyHeader by @rcmadhankumar in #1525
• Allow using kapp's --diff-anchored by @praveenrewar in #1454

🔈 Callouts

• @bentito made their first contribution in #1506

Full Changelog: v0.50.0...v0.51.0

📂 Files Checksum

79467aa1c0bfe48144dccf2908a66474b019ff562e7998645d46c628b1e3d458  ./release.yml
015a3f9807852cd3d1ca4d6f949f89407e8f44a8ba196b463162a97dc2300b41  ./kctrl-darwin-amd64
e02077e560747ee9dbfa2edbced39bd4fdcab756a9546062befa41641f9e71d8  ./kctrl-darwin-arm64
2de0eeada145888f8ac911c1f8a4e1d1b6b4202afd63cbca7f81bdc50d110b72  ./kctrl-linux-amd64
bdb68052e1791552bcb23231d0fefa45e98daf278555393a955bcbf1ebcd91ee  ./kctrl-linux-arm64
f5208f18edbd7634223f277077dd521a4a984d34352b2a7798b4e13c6d433980  ./kctrl-windows-amd64.exe
7a2225eb264313fb3ae199386488f50f7b21b54cd791486a237f156387d74682  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.46.10

What's Changed

• Bump dependencies in 0.46.x line by @rohitagg2020 in #1569

Full Changelog: v0.46.9...v0.46.10

📂 Files Checksum

61780b2fc495289444a76351f0e97bd550d8b39bd570564ab0db9358b74373eb  ./release.yml
d81675ab15fdd37545e8cc63b91850afed5bf4ae3d8d39f7057598da81eb7953  ./kctrl-darwin-amd64
cd68af86082f3c6be104126d5cbe057b8aba966f438ea0263cc9f44a28868892  ./kctrl-darwin-arm64
d34a84f10798ad9933dfb9bdf4f4d91814ddedf53b61769dad7685b03c19cf45  ./kctrl-linux-amd64
148b87430cbe3ace427fc5b8a2ae7ef5de8eb35b0568bf8176b56f46f7fd4bf8  ./kctrl-linux-arm64
7279656d1a71af272650ad1805a7331a667f04d3408253e31dcbea2091deff65  ./kctrl-windows-amd64.exe
439bd9511d3d4b19f8c6c822cb693f92311cb1f8704beed502ca89ce11f7c0cb  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.50.2

✨ What's new

• Bumping etcd to 3.5.9 in v0.50.x line by @sethiyash in #1507
• Bumping helm to v3.14.3 in v0.50.x line by @sethiyash in #1514

Full Changelog: v0.50.0...v0.50.2

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.2/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.2/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.2/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.2/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:d6fb6a6cb91ce6a578cf2cd9eaea3454c2d67a32a227bb9d131ee189456cc8af
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:a769f3865c59780fcfdb0fc360b705fd337e654e73fcc288c448828ab1e1b47c

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:d6fb6a6cb91ce6a578cf2cd9eaea3454c2d67a32a227bb9d131ee189456cc8af --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:a769f3865c59780fcfdb0fc360b705fd337e654e73fcc288c448828ab1e1b47c --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

📂 Files Checksum

4f419392e0ae2d0d4d7c1d88f7ad59b6ec19d87d8ec796ca06136531a268c4b2  ./release.yml
81cc3a73fe9031650506dab614002c240effe1957b7739f8e622f03d08b1e42d  ./kctrl-darwin-amd64
25d89eb2a5df97e5539429eaba48f7ce3b984e7357516dd5a62532b09d7bc224  ./kctrl-darwin-arm64
d399b865ad2081cc4761d57de00d0d93ef297d7198e7e329c3f195e47af79573  ./kctrl-linux-amd64
1ee3a40b740fc78d88502b23d36036c66bae479829065a3ccbacd081a6074137  ./kctrl-linux-arm64
55c3089810ba8b9792aa481780126ee938d32105721986e6be193407d94e3bc9  ./kctrl-windows-amd64.exe
34423834adfe046b10acd0caf3bb0d8b18c3ed3af0d21d287ad0aa34a7f728c1  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.50.3

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.3/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.3/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.3/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.3/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.3/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:24a956903de274649e19f836479a20350a098fa70e5347b4a2ca1dc91a0883fc
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:cb9be46e67cd79d73da6fe6237781a4971f82088e5f37221dab281088b1b4e9b

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:24a956903de274649e19f836479a20350a098fa70e5347b4a2ca1dc91a0883fc --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:cb9be46e67cd79d73da6fe6237781a4971f82088e5f37221dab281088b1b4e9b --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• Set seccompProfile to RuntimeDefault for both containers for 0.50.x. by @rohitagg2020 in #1526
• Bumping go version to 1.21.9 in v0.50.x line by @sethiyash in #1540

Full Changelog: v0.50.2...v0.50.3

📂 Files Checksum

896c2cae809d9875d8ff91fd77893bca9b49def4210ad3d171ec30a0b2f07f80  ./release.yml
560c5a4c52f5e8f13602bf887989b7fc6a65fd0c82de379eb24ae4d691263b77  ./kctrl-darwin-amd64
bff3337e0854147d2061297a1f62d65cabaac9a367880c611fecdd018c708175  ./kctrl-darwin-arm64
b09f5adbf197d7519f3278381df0bb3001922a58f76afd8b6f814afcdf418201  ./kctrl-linux-amd64
2b0c8cb02f5e50bdf0253007161652a43d45597416ca46987f371f77de079fb8  ./kctrl-linux-arm64
ba9964803d5ea93346421dbd921ae3aeb29d121f8cb72f600d4b429009a9ee13  ./kctrl-windows-amd64.exe
7bd1b7b39e24d6001e1a59828d448dec0493a6d5aaa99f67ff55f01ca877a2d9  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.50.0

✨ What's new

• Do not overwrite kapp deploy status during delete by @praveenrewar in #1460
• adding option for skipping SSL verification when using Git by @sethiyash in #1419
• Don't use a string as the OpenAPI default value for Helm values with an empty object default by @gcapizzi in #1449
• Make sure array Helm values always get an items field in OpenAPI schema by @gcapizzi in #1465
• Expose metrics to report time taken in fetch/template/deploy phase of app, pkgi, pkgr by @sethiyash in #1415
• Remove options that can be manipulated downstream by @100mik in #1462
• Adding os environment keys to cmd environment by @rcmadhankumar in #1391
• Make bits of kctrl more configurable by @100mik in #1426
• updating default value for apply-timeout option for kapp to 5mins by @prembhaskal in #1435
• Bumped grpc 1.58.3 by @kumaritanushree in #1446
• Signature verification added, release notes automated by @rcmadhankumar in #1463
• Return user friendly error when package doesn't exist by @rcmadhankumar in #1322
• changed e2e Tests Retry to iteration count by @jignyasamishra in #1453

🔈 Callouts

• @prembhaskal made their first contribution in #1435
• @jignyasamishra made their first contribution in #1453
• @gcapizzi made their first contribution in #1449

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.0/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.0/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.50.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.0/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/v0.50.0/download/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:72fd8e970300d4ddd3202a201064055a4bf24a992c15451e46dbd19e38a07b9e
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:2df4288136228f2f9c0101987ae12a29aabe33963cafde8359055899583a5130

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:72fd8e970300d4ddd3202a201064055a4bf24a992c15451e46dbd19e38a07b9e --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:2df4288136228f2f9c0101987ae12a29aabe33963cafde8359055899583a5130 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

Full Changelog: v0.49.0...v0.50.0

📂 Files Checksum

3f17b2bbe557ee01a27197263dd74cdb2e5ef06be011a397562bbff861caf01c  ./release.yml
739ed102ffce01a42e84bf1bc82bd2901e95d438dd701e789c578899119c385e  ./kctrl-darwin-amd64
876e74d5d142bedb008540d09961161618ce10490f4a9b718618b63b9cd8fc5f  ./kctrl-darwin-arm64
617a4e3ad2e247feb09857086d796065dad4df73cb81dc59d1aa7bfa4a9aff07  ./kctrl-linux-amd64
957a17fff540e40c60387682beb96de3b4444ebf222b5d771f8a1881d4bea65a  ./kctrl-linux-arm64
4ba17619028d91218529c66de14ac90ef208acfe1dbbe5bfe1e82d12094e2492  ./kctrl-windows-amd64.exe
d76a69554641d018e8723e87e144bc1edd1f7a74a5e057a74c85bb8a042ef876  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.49.0

What's Changed

• Enhanced logic used to safely delete Apps in terminating namespaces by @100mik in #1404 and #1394
• Change the default API port to 8443 by @joaopapereira in #1337
• Fix app-namespace usage for cluster options by @praveenrewar in #1333
• kctrl exists smoothly on adding a package repository with no changes by @rcmadhankumar in #1316
• Fix usage of --dangerous-allow-use-of-shared-namespace in hint by @mamachanko in #1388
• Dependency bumps and refactoring by @rohitagg2020 in #1383, #1399

Full Changelog: v0.48.0...v0.49.0

📂 Files Checksum

dfbed099fd55b1658995b3e2b5dee363ffe086f05243d59c21053a5a20943b2e  ./release.yml
65087b674099497fb9decbe85f75f59d891f9f458c7009bdfbca57de98a87ef7  ./kctrl-darwin-amd64
20abefc939a7f61629e418ae252bd7e58f27fe3fe7774a78ef183b180502bb92  ./kctrl-darwin-arm64
ed47847850039cf5572af49420d0365b2cc68a3a731fbc5e8a23b13eb8ffb020  ./kctrl-linux-amd64
f513b6b58a75b45506c3a347f63118bd4abffab9c69975c32089c7756d5807a4  ./kctrl-linux-arm64
8d39a3021435089a463e46d36d19978b350a341dd8681b8849f80a53a9e48f27  ./kctrl-windows-amd64.exe
2503e918a1cc9b8bf38493b2c9138c9cf95d8e855c81de92ea6e9670614b05e4  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.48.11

✨ What's new

• Update dependencies by @rohitagg2020 in #1622

Full Changelog: v0.48.10...v0.48.11

📂 Files Checksum

6117f81d0bf16e632c92021d93de320bad181eb4d39866067a9eb774634876b6  ./release.yml
6e3b1b24093d3ad9c88ed82f0dca075fa7f8640e77103e6ab583908719cdc63d  ./kctrl-darwin-amd64
09c987dd898870776297254351fe82f23674a664051995fc53652371bcf2ed14  ./kctrl-darwin-arm64
acb7aa996dc1892b6ab8ccb49e109b7de0ec981eec3bfcc141ea25a2705aeb4f  ./kctrl-linux-amd64
86e5500caa054425ae80a2bf190c64c697a7a64c9a3284465cdbc0d2150d3bfb  ./kctrl-linux-arm64
b93d6a6baa47450bb294ea982f5f0b6f66eb2cb1b9841ca77834f777d7e427a5  ./kctrl-windows-amd64.exe
4ebd4dcddabd864e84632f4a1dcfb59fc4666e09b7d8b0af02002c5eeb658aac  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml

v0.48.10

What's Changed

• Bumping dependencies by @rohitagg2020 in #1592

Full Changelog: v0.48.9...v0.48.10

📂 Files Checksum

1a11254e39403fe39ef02d9cd6b66c3f14260f927b388b087dd21f3b238f7ba4  ./release.yml
80c5d2211ae759f9c2d07a14bf23ded3b9ae300d3f2106827d99b163ca7e4828  ./kctrl-darwin-amd64
e6aedc91037620cf3c4daf5e49319d3fbde92c479b513d7e99e9664b282ce1ef  ./kctrl-darwin-arm64
559f6e1ad1519faf3d2392b6eaf49dd6df2d1d30a55df15141140c6a43e9b387  ./kctrl-linux-amd64
61ec81bd2694dd0ef764597b89eb482e0bf7d63110a16bccf5b9cd4ad613a70c  ./kctrl-linux-arm64
650f50d28744d1a91aa9ea9df168f9ae2787bbd04da36260c21c633125a80fd9  ./kctrl-windows-amd64.exe
1a414c14f8bae4b826d7bf0f36b13186c7a23c90bf6d47ea1e5ad84c95bcad18  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml