v0.16.3

Installation and signature verification

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.16.3/checksums.txt
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.16.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.16.3/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Installation of secretgen-controller

secretgen-controller can be installed by using kapp

kapp deploy -a sg -f https://github.com/carvel-dev/secretgen-controller/releases/v0.16.3/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/secretgen-controller/releases/v0.16.3/download/release.yml

Container Images

secretgen-controller and secretgen-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/secretgen-controller@sha256:5f369a7629643b0e8cf2c16d0df0e6d84d4bd84c7d0d303cd1824dd4d7f72c02
• ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:e5a898a284c222e44b00f2609e2fd321d3156558383fd619804328d5b0226d30

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying secretgen-controller image
cosign verify ghcr.io/carvel-dev/secretgen-controller@sha256:5f369a7629643b0e8cf2c16d0df0e6d84d4bd84c7d0d303cd1824dd4d7f72c02 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying secretgen-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:e5a898a284c222e44b00f2609e2fd321d3156558383fd619804328d5b0226d30 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• Set seccompProfile to RuntimeDefault for secretgen-controller container by @rohitagg2020 in #531

Full Changelog: v0.16.2...v0.16.3

📂 Files Checksum

f46c51ff511d0a0628037879e5f95f6e33e476546e17471efc350abcee932261  ./release.yml
7e1ecfaae6a76405056e2b71c48c2856ef203fdae71285dca37de32163de7ed4  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml

v0.15.6

What's Changed

• Set seccompProfile to RuntimeDefault for secretgen-controller container by @rohitagg2020 in #532

Full Changelog: v0.15.5...v0.15.6

📂 Files Checksum

f0065fda1124456c6d3771816f5edd324c794acc4a335252e76924b24506745d  ./release.yml
3dd013f8b5f15c426d98dd4da8643cc89de438c5cb3171c328dff4d942c13c7b  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml

v0.18.0

Installation and signature verification

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.18.0/checksums.txt
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.18.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.18.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Installation of secretgen-controller

secretgen-controller can be installed by using kapp

kapp deploy -a sg -f https://github.com/carvel-dev/secretgen-controller/releases/v0.18.0/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/secretgen-controller/releases/v0.18.0/download/release.yml

Container Images

secretgen-controller and secretgen-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/secretgen-controller@sha256:35060c30363c1806c137bd137edda0d1dd07442cf1372f1951b194b3b11f5b59
• ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:de46a8e1fe287d838040a4722eb12c4fd8f25c644f374b391cfa2e3d1424731c

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying secretgen-controller image
cosign verify ghcr.io/carvel-dev/secretgen-controller@sha256:35060c30363c1806c137bd137edda0d1dd07442cf1372f1951b194b3b11f5b59 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying secretgen-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:de46a8e1fe287d838040a4722eb12c4fd8f25c644f374b391cfa2e3d1424731c --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new
The go module name is changed to carvel.dev/secretgen-controller by @prashantrewar in #508

• 🚨 For library users 🚨 note that this is a breaking change on this version, no impact for users that only use the binaries

Full Changelog: v0.17.2...v0.18.0

📂 Files Checksum

bda7eeafb3c69ddc0f0c4e14f7f2c37a2350574301e3961c9aa1fc7894ec3ba5  ./release.yml
04210e4271f3f95e673d6f2207a022d78f7bf7c4da92ca30dad45ccf18479a8b  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml

v0.17.2

Installation and signature verification

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.17.2/checksums.txt
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.17.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.17.2/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Installation of secretgen-controller

secretgen-controller can be installed by using kapp

kapp deploy -a sg -f https://github.com/carvel-dev/secretgen-controller/releases/v0.17.2/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/secretgen-controller/releases/v0.17.2/download/release.yml

Container Images

secretgen-controller and secretgen-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/secretgen-controller@sha256:194ffb4e810a0013c2301c2806b345b84bf0c2c00976c84b60be310976988814
• ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:d877ec6bec4c734de87294e8904865bf52fbb150238e1c1fc8dbf72c0efbfb51

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying secretgen-controller image
cosign verify ghcr.io/carvel-dev/secretgen-controller@sha256:194ffb4e810a0013c2301c2806b345b84bf0c2c00976c84b60be310976988814 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying secretgen-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:d877ec6bec4c734de87294e8904865bf52fbb150238e1c1fc8dbf72c0efbfb51 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• Set seccompProfile to RuntimeDefault for secretgen-controller container by @rohitagg2020 in #520
• Update Copyright Headers by @prashantrewar in #522
• Bumping go version to 1.22.2 by @rcmadhankumar in #523
• Bump setup action v2, update kctrl and add --name flag to docker builds by @rcmadhankumar in #527

New Contributors

• @prashantrewar made their first contribution in #522

Full Changelog: v0.17.0...v0.17.2

📂 Files Checksum

a7289bc892cb70787ce45ced33e135711b9455709c4c4e35aaf547749eb509e3  ./release.yml
ac2bca91c2aecd28a8c8a244f8bb65706f9ef41615e7060313b8e411f80e3a2b  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml

v0.17.0

✨ What's new

• Bumped crypto 0.17.0 by @kumaritanushree in #515
• Signing artifacts and updated release notes to have steps to be followed for installation and verification by @kumaritanushree in #518
• Bumping go version to v1.21.6 by @sethiyash in #517

Installation and signature verification

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.17.0/checksums.txt
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.17.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.17.0/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Installation of secretgen-controller

secretgen-controller can be installed by using kapp

kapp deploy -a sg -f https://github.com/carvel-dev/secretgen-controller/releases/v0.17.0/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/secretgen-controller/releases/v0.17.0/download/release.yml

Container Images

secretgen-controller and secretgen-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/secretgen-controller@sha256:b098c97fb5a142931610d5743943df939ca84218093c8ee5e2d5b11cd8247320
• ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:01f8fe55ec65a3d233d937fb447e54b2b93f6b02c569e3e3b6cf9ae50f2e8cf0

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying secretgen-controller image
cosign verify ghcr.io/carvel-dev/secretgen-controller@sha256:b098c97fb5a142931610d5743943df939ca84218093c8ee5e2d5b11cd8247320 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying secretgen-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:01f8fe55ec65a3d233d937fb447e54b2b93f6b02c569e3e3b6cf9ae50f2e8cf0 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

Full Changelog: v0.16.0...v0.17.0

📂 Files Checksum

5b0507cea2ae544a6d0d2c0ee9b67b4017819a985b87a0ec0778f5a41efd31e6  ./release.yml
d34a59e65c36c8a24d2fb9f9de7a59514066b73ac5a6af42351937c0bdd940c2  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml

v0.16.2

Installation and signature verification

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.16.2/checksums.txt
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.16.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.16.2/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Installation of secretgen-controller

secretgen-controller can be installed by using kapp

kapp deploy -a sg -f https://github.com/carvel-dev/secretgen-controller/releases/v0.16.2/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/secretgen-controller/releases/v0.16.2/download/release.yml

Container Images

secretgen-controller and secretgen-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/secretgen-controller@sha256:82f3d0e2322f20bdb022857ea6962b3004f5c6898ca9ffcb2534c2b9d640dbfe
• ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:28b416bb422f82316e3bb438ca3305e4e4d122741131c144ac1ba04d6df499e6

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying secretgen-controller image
cosign verify ghcr.io/carvel-dev/secretgen-controller@sha256:82f3d0e2322f20bdb022857ea6962b3004f5c6898ca9ffcb2534c2b9d640dbfe --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying secretgen-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:28b416bb422f82316e3bb438ca3305e4e4d122741131c144ac1ba04d6df499e6 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

What's Changed

• Bumped crypto 0.17.0 by @kumaritanushree in #515
• Signing artifacts and updated release notes to have steps to be followed for installation and verification by @kumaritanushree in #518
• Bumping go version to v1.21.6 by @sethiyash in #517
• Bump go version to 1.21.9 in 0.16.x line by @rcmadhankumar in #526

Full Changelog: v0.16.0...v0.16.2

📂 Files Checksum

3572db009de625c19235a982e1775e286842423f1e0be831d15cf533ede960d2  ./release.yml
da623311e0c2a9926d528de9f5c10378135b3e7995a8964e18e872dfe9bebb96  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml

v0.16.1

✨ What's new

• Bumped crypto 0.17.0 by @kumaritanushree in #515
• Signing artifacts and updated release notes to have steps to be followed for installation and verification by @kumaritanushree in #518
• Bumping go version to v1.21.6 by @sethiyash in #517

Installation and signature verification

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.16.1/checksums.txt
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.16.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/secretgen-controller/releases/download/v0.16.1/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Installation of secretgen-controller

secretgen-controller can be installed by using kapp

kapp deploy -a sg -f https://github.com/carvel-dev/secretgen-controller/releases/v0.16.1/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/secretgen-controller/releases/v0.16.1/download/release.yml

Container Images

secretgen-controller and secretgen-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/secretgen-controller@sha256:8131cb502e4080bdf12e43e72439ed738992b2bb19423d1030cdcc1b8aa38e28
• ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:15767f33ef0b730a866b7219760909a9adeecf0a3e5d4e5aa5aab34471f52a0f

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying secretgen-controller image
cosign verify ghcr.io/carvel-dev/secretgen-controller@sha256:8131cb502e4080bdf12e43e72439ed738992b2bb19423d1030cdcc1b8aa38e28 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying secretgen-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/secretgen-controller-package-bundle@sha256:15767f33ef0b730a866b7219760909a9adeecf0a3e5d4e5aa5aab34471f52a0f --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

Full Changelog: v0.16.0...v0.16.1

📂 Files Checksum

0e6beec1999ad8cebb61152b4dcce9c904d16fb75d24e373ddcdfe325690ba59  ./release.yml
8dd062978aaaf3d5bccf745c1f99ef94c01f7e972c7901e2aff06ea579c53d1d  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml

v0.16.0

✨ What's new

• Made metrics port configurable by @douglas-c in #510

🔈 Callouts

Thanks to

• @douglas-c made their first contribution in #510

Full Changelog: v0.15.1...v0.16.0

📂 Files Checksum

a2f356503707945eb03bb50b43e5886fd8ae13afb59f8eaa5cfc9e6e1861772d  ./release.yml
d0617a93391a04e2f6cf11724b94d4052608c679fd72846f3ad4deea10858eea  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml

v0.15.5

What's Changed

• Bump go version to 1.21.9 in 0.15.x line by @rcmadhankumar in #525
• Bump setup action v2, update kctrl and add --name flag to docker builds in line 0.15.x by @rcmadhankumar in #529

Full Changelog: v0.15.3...v0.15.5

📂 Files Checksum

a79e2e62b0add67ab2354af886703c6e2a7ec9c98842030147c50a6807e89ccd  ./release.yml
41647aeedad9611f6746553214ad2bf2f18cbfe7c37828268dfacd17a253d45c  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml

v0.15.3

What's Changed

• Bumped crypto 0.17.0 by @rohitagg2020 in #516

Full Changelog: v0.15.2...v0.15.3

📂 Files Checksum

09b801783158d749ebed71f778575e5a8f8017a16f3bc3b51adb9ebac256a16b  ./release.yml
a06559aa12465c878c1d3ab2842382cec9a88bd0bd84cd5f07a2a4a29869c3d9  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml