search

oauth2-proxy / manifests

For hosting manifests to allow for the deployment of OAuth2-Proxy/OAuth2-Proxy
Apache License 2.0
170 stars 153 forks source link

Publish helm charts also as an OCI package (e.g. on GHCR registry) #187

Closed mkilchhofer closed 6 months ago

mkilchhofer commented 8 months ago

The helm charts are published using the classic approach with a static webserver and an index.yaml. In helm 3.8+ the OCI method went GA:

I see two options to use as an OCI mirror:

pierluigilenoci commented 8 months ago

Is #181 solving your issue?

mkilchhofer commented 8 months ago

Is #181 solving your issue?

Yes :) 👍

mkilchhofer commented 8 months ago

Hi @pierluigilenoci

I reopened this issue as the latest 7.0.0 didn't arrive here: https://github.com/orgs/oauth2-proxy/packages.

Maybe you could have a look if packages are public inside the Org settings: image

If I blindly add a dependency to an umbrella chart and let helm try to pull it, i get:

$ helm dep up
Getting updates for unmanaged Helm repositories...

(...)

Downloading oauth2-proxy from repo oci://ghcr.io/oauth2-proxy/charts
Save error occurred:  could not download oci://ghcr.io/oauth2-proxy/charts/oauth2-proxy: failed to authorize: failed to fetch anonymous token: unexpected status from GET request to https://ghcr.io/token?scope=repository%3Aoauth2-proxy%2Fcharts%2Foauth2-proxy%3Apull&service=ghcr.io: 401 Unauthorized
Error: could not download oci://ghcr.io/oauth2-proxy/charts/oauth2-proxy: failed to authorize: failed to fetch anonymous token: unexpected status from GET request to https://ghcr.io/token?scope=repository%3Aoauth2-proxy%2Fcharts%2Foauth2-proxy%3Apull&service=ghcr.io: 401 Unauthorized

Cheers, Marco

pierluigilenoci commented 8 months ago

@mkilchhofer unfortunately, you are right; packages are private. 😢

However, I do not have the permission to change this configuration. 🤷🏻‍♂️

I necessarily have to disturb @JoelSpeed or @NickMeves. Can you solve it? 🙏🏻

pierluigilenoci commented 7 months ago

@JoelSpeed or @NickMeves, can we get your attention here?

pierluigilenoci commented 6 months ago

@JoelSpeed or @NickMeves, can we get your attention here?

JoelSpeed commented 6 months ago

I believe I've changed the settings on the chart so that it should now be publicly visible, can you verify that for me?

mkilchhofer commented 6 months ago

I believe I've changed the settings on the chart so that it should now be publicly visible, can you verify that for me?

Thank you @JoelSpeed, it works now! 🙏 

$ helm dep up
Getting updates for unmanaged Helm repositories...
(...)
Update Complete. ⎈Happy Helming!⎈
Saving 2 charts
(...)
Downloading oauth2-proxy from repo oci://ghcr.io/oauth2-proxy/charts
Pulled: ghcr.io/oauth2-proxy/charts/oauth2-proxy:7.4.1
Digest: sha256:998f838e24aee9f76432920efcfb8bd55ad1c6eb010d6e6483e70722ffd033cc
Deleting outdated charts