✨ What's new

• Fixed CVE's by @neil-hickey in #650

Full Changelog: https://github.com/vmware-tanzu/carvel-kapp/compare/v0.53.0...v0.53.2

📂 Files Checksum

bd378e1a74101a44ac9268e79cd555c68f70511c39804ea928ca20fe9fd933ef  ./kapp-darwin-amd64
eb5dc2e8ba0988db8138d7dd3a51fee8787a666d973a48c076719c4ec50df885  ./kapp-darwin-arm64
c8f38e16b586cac6d27177662b0139bd6acbe6b4de7dbee70087700756adaeb1  ./kapp-linux-amd64
e4bdc2c1cd7f77ddca81d471dd4ba8969f109abbf9fa13f9b46c995dd6b6a921  ./kapp-linux-arm64
5f7b426cca84d42da08a6958a555960d3989d04310eed110418197f7286e4032  ./kapp-windows-amd64.exe

✨ What's new

• Fixed CVE's by @neil-hickey in #651

Full Changelog: https://github.com/vmware-tanzu/carvel-kapp/compare/v0.49.0...v0.49.2

📂 Files Checksum

f337a7a788ff58909c118931838b410b20a6f371cbca3289b84057ed8c4913e4  ./kapp-darwin-amd64
cceb043dc61395673bc145a84b282df02df0a89f1aa60f382d8e090389c71313  ./kapp-darwin-arm64
731dae444ccc8ecd2cf47100a5c53a597bcef10032d4b2456e2e8271f0c91889  ./kapp-linux-amd64
97b721711490239d47669845b29cfc6f68fa99ec915443118d4a87cd50cd3de2  ./kapp-linux-arm64
b000062482b059c94689fd239482208d8f2b27e60b80ef917de67e3a7985b934  ./kapp-windows-amd64.exe

✨ What's new

• Bumped lots of dependencies by @rohitagg2020 in #648

Full Changelog: https://github.com/vmware-tanzu/carvel-kapp/compare/v0.46.0...v0.46.1

📂 Files Checksum

8eb6b9bac4d6bf6d0e1f3aeab2f7ea8028ec0c71fe240f985d341cd5eea6560b  ./kapp-darwin-amd64
a56c462fef72d351c03c3dc26e54e1229e85372f1532b555f505e3b35966f962  ./kapp-darwin-arm64
9f10015615d71153d02ff5f2d2735bd928b2b8007782461faca65fd5f85fcffd  ./kapp-linux-amd64
82b0ef7b82866d2af8f0bf8eda85c0d310d599d0d635bb7e94a4e8c9f290b525  ./kapp-linux-arm64
53d91b528959923cbd24776ddf87a0b3c7058d0ecb37d9a8d05089a86ff05ae0  ./kapp-windows-amd64.exe

✨ What's new

• Introduced new annotation kapp.k14s.io/renew-duration by @kumaritanushree in https://github.com/vmware-tanzu/carvel-kapp/pull/571
  • Resource is updated if kapp deploy is used after the renew-duration has passed.
• Default wait-check-interval duration is now increased to 3s (from 1s) by @kumaritanushree in https://github.com/vmware-tanzu/carvel-kapp/pull/637
• Include default template rules for packaging resources by @mamachanko in https://github.com/vmware-tanzu/carvel-kapp/pull/609
• Add fallback-on-update-or-noop create-strategy to changes summary by @PiotrLewandowski323 in https://github.com/vmware-tanzu/carvel-kapp/pull/628

New Contributors

• @PiotrLewandowski323 made their first contribution in https://github.com/vmware-tanzu/carvel-kapp/pull/628
• @mamachanko made their first contribution in https://github.com/vmware-tanzu/carvel-kapp/pull/609

Full Changelog: https://github.com/vmware-tanzu/carvel-kapp/compare/v0.53.0...v0.54.0

📂 Files Checksum

2521971ce334e32af32942aece39c9cdc7a2a9c982c386c2aa61db1a2527a10e  ./kapp-darwin-amd64
1a3de4626ab84a5f29e58ae4498f83886fcb6d588454d1d4603d4bc4414f309e  ./kapp-darwin-arm64
886cd9d634214904ee34f44510abe85ce60acbbe4529131ad97bee387d6327fe  ./kapp-linux-amd64
1afa5624183464b4c9dca7a7f63ea51c7f78d74a722e11ec4a774c8e68fb5784  ./kapp-linux-arm64
5ec78c71b9398e1746cd3c7a5d27db0a5440c2ebf5a92d6a325cd1fdeaf0810c  ./kapp-windows-amd64.exe

✨ What's new

• ❗ Breaking Change Go module renamed from github.com/k14s/kapp to github.com/vmware-tanzu/carvel-kapp (#567)
• Added exit-early-on-apply-error flag that can be used to exit as soon as an error is encountered while applying changes (default true) (#532)
• Added exit-early-on-wait-error flag that can be used to exit as soon as an error is encountered while waiting for changes (default true) (#532)
• Resource namespaces saved in kapp metadata configmap during kapp deploy will now be added to fallback allowed namespaces. (#533)
  • The fallback allowed namespaces are used to list resources when limited scoping is used.
  • Previously only the namespace provided via --namespace flag was used.
• Added change rule to delete ServiceAccounts before Namespaces. (#593)
• Fixed bash completion by removing extra output from help command. (#592)

Full Changelog: https://github.com/vmware-tanzu/carvel-kapp/compare/v0.52.0...v0.53.0

📂 Files Checksum

2b466b9f8bbc8719334cadf917769b27affc10c95c9ded3e76be283cfd3d4721  ./kapp-darwin-amd64
d5e9d0d6817a85bb3a2e247092f7153fa2a57209351fe575dbb6ecd3dfbd9ac0  ./kapp-darwin-arm64
c2c7381a152216c8600408b4dee26aee48390f1e23d8ef209af8d9eb1edd60fc  ./kapp-linux-amd64
b4ec066f491c687218eca7e986bdedda6e2680d2bcc3ae1495eb34597aeb2bd1  ./kapp-linux-arm64
7d4e80223f826bc2583d576e3b40057d2163c1f393f6aa6ca5b62e11444b67a2  ./kapp-windows-amd64.exe

✨ What's new

• Added --default-label-scoping-rules flag to enable or disable the default label scoping rules added during deploy https://github.com/vmware-tanzu/carvel-kapp/pull/565
• Bump k8s.io/client-go from v0.22.10 to v0.24.3
• Bug fix: --app-metadata-file-output writes to disk even when deploy fails https://github.com/vmware-tanzu/carvel-kapp/pull/574

Full Changelog: https://github.com/vmware-tanzu/carvel-kapp/compare/v0.51.0...v0.52.0

📂 Files Checksum

993285cd7747862da92d68c2faab102e01a719a7de691d7630b28271c0dde526  ./kapp-darwin-amd64
d2771ead31f944726e0372c05396404a4edeeed568b17ed6e9d0f991a455076c  ./kapp-darwin-arm64
9c6ab08ddb4f950eeed9df4b8618d43d3cf82f076c24073885904b3c14ba5bd7  ./kapp-linux-amd64
7f5564ac3b670dd2ff51953372924c2880e59c8aea38acc21f433044ba18d707  ./kapp-linux-arm64
eedfc85ad19a36fa45aef81f55e63f9db27f0f5102dfd5233b67aeadadbc8043  ./kapp-windows-amd64.exe

✨ What's new

• Added --app-metadata-file-output flag which can be used to save recorded app metadata to a file.
• Bump modern-go/reflect2 to v1.0.2 to fix incompatibility with Go v1.18
  • This problem became apparent with some random failures while trying to connect to GKE clusters.
    • Example error fixed unexpected fault address 0xb01dfacedebac1e fatal error: fault

Full Changelog: https://github.com/vmware-tanzu/carvel-kapp/compare/v0.50.0...v0.51.0

📂 Files Checksum

1da812a536d80f7b0aefb2155ac6903df2f92c9ec5c204d6b985a0c51a88041c  ./kapp-darwin-amd64
be1eaec00d1a7e6ab24c86be80bf3e5713af9d14d93970ec34dd65ba6aaef3c1  ./kapp-darwin-arm64
58443df4200c683597f5c8a43ea8f5b7110bbcb1fbd8ca3f2061e9eff1a10e0e  ./kapp-linux-amd64
368281fd8281bfc37d14704fd4482ec21cfabd63aeb66d07d520864057ceb599  ./kapp-linux-arm64
7197042ca9ce35f3c267883f18495929ec5a1fac52264673bcae5129e7cb4d2d  ./kapp-windows-amd64.exe

✨ What's new

• Default value of --tty flag is now set to false for commands other than deploy and delete https://github.com/vmware-tanzu/carvel-kapp/pull/527
• Ownership check for resources with kapp.ka14s.io/exists and kapp.ka14s.io/noop annotation are now skipped https://github.com/vmware-tanzu/carvel-kapp/pull/522
• Added support for unblocking waiting changes using unblockChanges in waitRules https://github.com/vmware-tanzu/carvel-kapp/pull/499
• Added --diff-changes-yaml flag which can be used to print the YAML applied by kapp https://github.com/vmware-tanzu/carvel-kapp/pull/524
• Added default change groups and change rules for kapp-controller app and packageinstall https://github.com/vmware-tanzu/carvel-kapp/pull/552

New Contributors

• @vicmarbev made their first contribution in https://github.com/vmware-tanzu/carvel-kapp/pull/539

Full Changelog: https://github.com/vmware-tanzu/carvel-kapp/compare/v0.49.0...v0.50.0

📂 Files Checksum

5d424f735cdef6ced3f3256312a4dcc99de14a294a5c82cd98a8e470f8b36dee  ./kapp-darwin-amd64
00278e7ce36001d3df921aa22011d65b524da6a6cf8a22c1121197cb8d33046c  ./kapp-darwin-arm64
a9bcebef169ba759ba24b341f42022edef5b234b8ba61116df2305b3c8c5f2fb  ./kapp-linux-amd64
bc2f7d973217cd8c7e801f861cfd1ecfe108ccb72cf388dc4af6bb374ef52b9f  ./kapp-linux-arm64
56f0fa29cdce099ff91f566cf99fe7287be376b143d1e5a7ae0f62f43608ab6f  ./kapp-windows-amd64.exe

✨ What's new

• Added default rebase rules to remove unwanted diffs in openshift clusters.

📂 Files Checksum

51e209f903b17c9e330151c41c6d507bfabccfdaa56dd8fdaa1c0f39ed2240e9  ./kapp-darwin-amd64
6c1b6a9a487d881abcd4596ccd31ff7a4e127f2f33c112709844f7a3fb8a030f  ./kapp-darwin-arm64
dec5040d90478fdf0af3c1548d46f9ded642f156245bba83fe99171c8461e4f7  ./kapp-linux-amd64
e2047147c4bc00d8fcf9a5f01bdefc9fdf0aa5de9582357f03e54d4cd9fc0d75  ./kapp-linux-arm64
5343bec1f6788bff6c2fa953e4e484cd6245d88df38d73e5bb7c79111c4be484  ./kapp-windows-amd64.exe

✨ What's new

• kapp delete now has --prev-app flag to delete an app using previous name.
• waitRules now support waiting for resources using ytt (Refer to docs for more details)
• Using --diff-run while deploying an app doesn't create a ConfigMap now.

📂 Files Checksum

20b57cbb2ba883ebb78809a71c42c0f26b7b0ca15610d7a37dab4d962cca6e54  ./kapp-darwin-amd64
bd653b97c58f2bae29fcc655f09c4687f211672655a7985b10daa7a6637ee6a9  ./kapp-darwin-arm64
1f5fa1cb1d90575d97d7f7f801070ebf4096f10a0b21b4bbd9521b183bad91c6  ./kapp-linux-amd64
261ff488527d8144daa00cbabc472c0fb9609f24c774b279efc4be33d387c4b8  ./kapp-linux-arm64
ae7e5a1387abe9a600b75846e563345ebee34a9e6ecf0bc155c8771be27cf9fd  ./kapp-windows-amd64.exe

✨ What's new

• Handle “recreate” strategy while waiting for deployments (#500)
• waitRules now support matching observedGeneration at condition level (#478)
• Allow kapp deploy to rename app using --prev-app (#450)
• app-change list now supports filtering (#409)
• condition column is removed from inspect table (#445)
• Experimental: Add suffix to internal configmap names created for recorded apps (#403)
  • KAPP_FQ_CONFIGMAP_NAMES can be set to true to opt in for this behaviour

📂 Files Checksum

ed0a7a86828517e7aa3d4bede659ac725806b0201692f2d574beb71785220406 ./kapp-darwin-amd64
e0c1962884ad153d055786b523827c09d3c05a3faa07c0b186acd40bdb7d46aa ./kapp-darwin-arm64
2b1bd5e3a35ed63045be80a7cc8cbc054fe4e98c89c55f9006c8fec2243658a4 ./kapp-linux-amd64
8808e0cbe06028581b8ed48e0a8426b7fd9dc26d17e24f9ab96522774892839a ./kapp-linux-arm64
fed3ddfb90aa096c801764adccd60402fa01e8f3f6bcfb3f3b7640fa87977591 ./kapp-windows-amd64.exe

🔈 Callouts

Thanks to

• Nicholas Hughes @nicholasmhughes for their contribution (#455).

✨ What's new

• Performance enhancements
  • For recorded app, reduced API calls to identify App resources during diff stage.
  • Reduced calls to identify transient resources.
• Allow users to add labels on app-group
  • e.g. kapp app-group deploy {DIR} --labels x=y
• Added filtering by label and age on kapp ls
  • Filter on labels: e.g. --filter-labels x=y
  • Filter by age: kapp ls --filter-age 5m+
• Disable kapp.k14s.io/original annotation when resource size exceeds K8s annotation value limit, allowing kapp deploy to proceed instead of failing.
• In the progress log, indicate if the deletion step is waiting for finalizers to be removed.

📂 Files Checksum

7a3e5235689a9cc6d0e85ba66db3f1e57ab65323d3111e0867771111d2b0c1a3  ./kapp-darwin-amd64
5fd36b56a7d8e8f99214f2e8096bd7f293492e0ffba98cb14611150efa113f4f  ./kapp-darwin-arm64
130f648cd921761b61bb03d7a0f535d1eea26e0b5fc60e2839af73f4ea98e22f  ./kapp-linux-amd64
f40cf819f170ce50632bcb683098a05711d0a2a7110b72eb2754a7fc651eb2f3  ./kapp-linux-arm64
e7c1809049e3a7be958be8a72f8bc739fa8f3a7a03866347c6e5a8e41c134dd2  ./kapp-windows-amd64.exe

🔈 Callouts

Thanks to

• Dave Protasowski @dprotaso for submitting PR to fix go install

For helping out with this release

✨ What's new

• User-provided status will be ignored in favor of cluster-provided status for a K8s resource during the diff stage.
• Resource Type Cache is ignored while checking for a successful delete operation
  • This problem became apparent with aggressive caching introduced in v0.44.0
    • Example error that is fixed: kapp: Error: Relisting app resources: ... the server could not find the requested resource

📂 Files Checksum

44f66b7ed664e4537b2caa0453aa239f16e20c028b11fedc22f46f3cac3ba9fd  ./kapp-darwin-amd64
5590ae83587a8b00545c7614aa962acade7dc9614bb39179f7fdc07e4add7c46  ./kapp-darwin-arm64
9d2c0441729bebe49e5fb9a1a7b7088f0bee4092ba23e267339a9478948c5731  ./kapp-linux-amd64
59c1cb33743efd2b6b3c2cf53a77a13435a6d3f7e9fc0563905d169e2359d4ea  ./kapp-linux-arm64
8574a0829cd3666af737b5ac491dca3382a1f04b3c67e92f84391f9d29a40fe4  ./kapp-windows-amd64.exe

✨ What's new

• Performance improvement using memoization

📂 Files Checksum

27980ca316c2124fb2e983ff971c9afb12be818ac93d7d63c6b03ddb42d38f97  ./kapp-darwin-amd64
80998bdfb749710fb3aa53206bd89be867883cb6b135c572266c238ff0fa7e66  ./kapp-darwin-arm64
aaa5162b857868e64a270641b79a2a980e4528d40e88ea7741440b3028637c7c  ./kapp-linux-amd64
2b55e6e32b1d76a90a9e446b359f8a778b0c1821dd7fabbe330c0c10a965bc46  ./kapp-linux-arm64
7542555a5e16ee047c5ef9190f6fb0647a904ec48db8b9ae74dda2b88cfab71f  ./kapp-windows-amd64.exe

✨ What's new

• Added kapp.k14s.io/exists annotation
  • kapp will ensure that resource exists in Kubernetes (+ check appropriate wait rules) before considering it as successfully reconciled. It will not be considered to be part of the app (not labeled).(#194)
• Added kapp.k14s.io/noop annotation
  • kapp will use the noop operation for the resource. It will not be considered to be part of the app (not labeled).

📂 Files Checksum

c5c7f34399293ccda62dc7b809535a8e2f2afb9901147429281c0f4884b13483  ./kapp-darwin-amd64
212946c222cb39cc9a0bba74ed8a5ac073f194354464e1677090f3bc98e7f14f  ./kapp-darwin-arm64
f8669039dfba001081c94576c898d10aba28ecceffcd98708e8f2c87c13109e4  ./kapp-linux-amd64
b28d1f6de79b03308806c5be5bfe121d578d10c35b530eb3f311f7c69e20d168  ./kapp-linux-arm64
1efc538ac9450175bad00d7100e2cfc725d2fe55323dd448adf6ebce6c81c502  ./kapp-windows-amd64.exe

✨ What's new

• Relax change name group validation for long names
  • This problem became apparent with more fine grained ordering introduced in v0.41.0
    • Example error that is fixed: kapp: Error: Change graph: ... name part must be no more than 63 characters

📂 Files Checksum

47102637b9cd541b4ad1d6074f77b7cec1b60c170a0eb5c92df89674207194e7  ./kapp-darwin-amd64
221578c8736018771e7271e89abeee042be0bd0f7ae32c898d67c362840de20b  ./kapp-darwin-arm64
5d5c4274a130f2fd5ad11ddd8fb3e0f647c8598ba25711360207fc6eab72f6be  ./kapp-linux-amd64
c5c129db52a7b67df5971549686429ba484096dd2ba7e1c4289e5feb853be0ab  ./kapp-linux-arm64
3c01ac792609ed1a255b1ce25c0c67728131649b39d7e262196b5b8347d9b94a  ./kapp-windows-amd64.exe

✨ What's new

• Added --diff-filter flag to filter changes (#182):
  • based on type of operation, criteria for existing and new resources associated with each change
  • e.g. --diff-filter '{"and":[{"ops":["update"]},{"existingResource":{"kinds":["Deployment"]}}]}'
• Added kapp.k14s.io/versioned-explicit-ref annotation (#286)
  • annotation indicates to kapp that resource references a versioned resource without specifics on how to update it
• Added support change group placeholders for granular ordering of resources (#297):
  • CRs now depend only on their respective CRDs (previously all CRs depended on all CRDs)
  • namespaced resources now depend only on their respective namespaces (previously all ns resources depended on all Namespaces)

📂 Files Checksum

928f1269b52bbb2c725a3ccccc0a63925a03d169d8d3341183e23d429530ef2c  ./kapp-darwin-amd64
8ff71bc20b6a0c6f4f1c9b105f7d1cb29cfcbca99e29d6bb6569eb2e32cb8266  ./kapp-darwin-arm64
ce4c38a6c6c7785d32afbc31ba316a6b89c068903d356a2ef8f54101b4073953  ./kapp-linux-amd64
81a8b064c2a1c94ce5e185d861384354251db9d5935ab7942280dc05cf0f452f  ./kapp-linux-arm64
e4c49cb4ee64e07457088f5870514468cae528de01567172b0cc453150c8f865  ./kapp-windows-amd64.exe

✨ What's new

• Reenabled showing Kubernetes API warnings (#299)
  • Warnings are now shown as part of progress log
• Adding new flag 'new-namespace' for renaming apps (#165)
• Adding resource filter for labels (#272)
  • Example: kapp deploy ... --filter-labels foo=bar
• Checking the UID to confirm the deletion of resource (#296)
  • Previously kapp would continue waiting for resources that were already deleted but were recreated even though their UID has changed. Now kapp will stop waiting after the deletion to be more consistent with kubectl.
• Resource wait timeout (#208)
  • It's now possible to use --wait-resource-timeout flag to cap individual resource wait times
• Updating the dependency to fix goprotobuf issue (#308)
  • Even though kapp was not affected, we decided to bump dependency anyway
  • goprotobuf's CVE: https://nvd.nist.gov/vuln/detail/CVE-2021-3121

📂 Files Checksum

d667c5cd05eb20df74763b59f31203569f7c89f185c5b7945d74a1235c15040d  ./kapp-darwin-amd64
1632b8365e9392c08425e9ff8003fe5ff616b622c6e0255ef69bc87db0349afe  ./kapp-darwin-arm64
94cfdcf8a3aec521a68c4c2c569434684e71914d42296bc9fee8bfe912f63984  ./kapp-linux-amd64
5a79561d07d6ef37fec795b9956d250cf9a1e4b245bd14bc154a21d9ab811a4c  ./kapp-linux-arm64
addcd942895f12f15dfe77ddeec91ad256c5abf2118b7959c55eb617c0f7b2eb  ./kapp-windows-amd64.exe

✨ What's new

• Allows to adopt resource with kapp.k14s.io/versioned annotation
  • Useful when resource was initially deployed with kubectl and then switched to be managed by kapp
• Disable --warnings by default for now
  • Warnings were being excessively shown due to kapp querying k8s APIs that might be removed later. We will revisit in future releases how to show warnings only for submitted configuration.

📂 Files Checksum

43d79433d3d4dad4ffde7c775ea99f5c6b10c8949d54fd2a048ba66aaea89a6b  ./kapp-darwin-amd64
dfd5d32c845b62fd2617342424fb4376ce9a5a6fe644a9bbdf4b9f31856533aa  ./kapp-darwin-arm64
2120a627a867e04840d6e0e473097894a3b74b54b62f231b8df3f8670c4e80a3  ./kapp-linux-amd64
e89b2bcdf42edf04b33bf57f3c033b146ecd763a52d3d7ec99d501fa2f0ae423  ./kapp-linux-arm64
407c7703a6403ea4543d7f92399f6b2ef8fa7144e3b37ab1ab1d837725973f3b  ./kapp-windows-amd64.exe

✨ What's new

• Add --warnings flag to show Kubernetes provided warnings (enabled by default) (#266)
• Add kapp.k14s.io/versioned-keep-original annotation to keep originally named resource (#119)
  • This might be useful for cases when some configuration refers to a static name of a versioned resource
• Retry Kubernetes internal errors (#278)
• Improve ServiceAccount rebase behaviour to avoid overriding token secret
  • Previously ServiceAccount's secret would keep on dropping token secret (to be immediately added back by K8s controllers)
• Add ytt rebase rule type. Docs coming.
• Add default waiting behavior for kapp-controller PackageRepository and PackageInstall
• Add --managed-fields flag for kapp inspect command (#247)
• Make --diff-exit-status flag work for app-group deployments (#238)
• Add default secretgen controller rebase rule for image pull secrets secrets (#284)
  • For secrets annotated with secretgen.carvel.dev/image-pull-secret

📂 Files Checksum

2c7c9faf6b5bc564ee6a9450c1e21c16aa97c138ea59629441f8f28876bed6ad  ./kapp-darwin-amd64
22e3d694745d5f48863018e26ecd7f3d0b8ec475adc40e081a1a39dc4d8f01bf  ./kapp-linux-amd64
e594417b8dfe4f5fd4d26c313c64000df1f7259e57f79bbb34ac3c771f5f1422  ./kapp-linux-arm64
c1bd500776b36931dd91a364006007036606c6fc8ea13c77a649032510646c3b  ./kapp-windows-amd64.exe