New Kong Download Locations

Announcements
1

Hello all,

As many of you know, Kong has historically hosted many of our software downloads on Bintray, which has recently announced it’s sunsetting its service. In an effort to mitigate user impact as much as possible, Kong has migrated its downloads to a variety of alternative locations:Kong Gateway standard file (.rpm, .deb, and other single files) download locations have been migrated onto https://download.konghq.com including apt and yum repositories. Check the install instructions of your OS of choice for the latest install instructions with updated locations

Kong Gateway Docker images can be found on Docker Hub. Apache2 licensed images remain in their previous location and Free/Enterprise images can be found at Docker Hub

The Kong Ingress Controller (KIC) Docker image can be found on Docker Hub at Docker Hub

Repository metadata signing hasn’t yet been made available but we’re working on it. We believe we’ve updated the docs but please raise any concerns / issues you might find

Regards,
Colin Hutchinson

1 Like
2

Hello,

may I request that the APT repositories have to be signed ? Should I open a Github issue ?

Regards,
Emerick

3

Repository metadata signing (including for our apt repositories) is pending but coming very soon. We’re aligned that it’s important but didn’t want to rush / get it wrong and errode trust in us.

We’ll update this thread when signing is implemented as well as updating the docs to reflect.

4

Hi @hutchic ,
I used to get the tar file for Alpine OS, located at https://bintray.com/kong/kong-alpine-tar/download_file?file_path=kong-${KONG_VERSION}.amd64.apk.tar.gz, but I’m not able to find it anymore in the new download hierarchy.
Any hint on where to find it now? Will you add it soon?

Thanks a lot for your help!
Patrice

5

The download index page has a bug (fix pending) where it lists all deb/rpm’s but fails with things that are released under the type of “file”.

The location follows the naming convention of the other release types so alpine tar.gz’s can be found https://download.konghq.com/gateway-2.x-alpine/

6

@hutchic any update about signing keys?

7

two weeks later, any update about signing keys?

8

This is still on our radar – we’re still somewhat blocked by a bug on the software we’re using for software distirbution.

9

@hutchic , I’m having trouble downloading the repository configuration:

https://download.konghq.com/gateway-2.x-amazonlinux-2/config.repo

It replies with 500 Internal Server Error.

Is this related to the bug previously mentioned?

10

any update on signing keys? the last update from Kong staff was June 23rd 2021.

11

Hello,

How is the progress on this issue going, has any progress been made on getting the repository metadata signed?