Skip to content

feat: Add Helm chart repository support (HTTP + OCI)#37

Open
delta-whiplash wants to merge 12 commits into
kasmtech:developfrom
delta-whiplash:add-helm-repo
Open

feat: Add Helm chart repository support (HTTP + OCI)#37
delta-whiplash wants to merge 12 commits into
kasmtech:developfrom
delta-whiplash:add-helm-repo

Conversation

@delta-whiplash
Copy link
Copy Markdown

@delta-whiplash delta-whiplash commented Apr 29, 2026

Summary

Implements Helm chart repository support addressing issue #22.

What's included

Workflows:

  • .github/workflows/helm-release.yml - HTTP Helm repo via GitHub Pages
  • .github/workflows/oci-publish.yml - OCI registry (ghcr.io)
  • .github/workflows/chart-test.yml - Lint/validation on PRs

Key features:

  • Auto-creates gh-pages branch on first run (no manual setup)
  • Triggers on release/** branches (aligned with upstream branching)
  • Manual trigger via workflow_dispatch
  • SHA-pinned actions for security
  • Concurrency controls prevent duplicate releases

Installation

After merge + enabling GitHub Pages (Settings → Pages → gh-pages branch):

helm repo add kasm https://kasmtech.github.io/kasm-helm
helm install kasm kasm/kasm --namespace kasm --create-namespace

Or OCI:

helm install kasm oci://ghcr.io/kasmtech/kasm --namespace kasm --create-namespace

Actions (SHA-pinned)

Action Version SHA
actions/checkout v6.0.2 de0fac2e...
azure/setup-helm v5.0.0 dda3372f...
helm/chart-releaser-action v1.7.0 a0d2dc62...
helm/chart-testing-action v2.8.0 6ec842c0...
actions/setup-python v6.2.0 a309ff8b...

Tested on fork

✅ HTTP repo: helm repo add test https://delta-whiplash.github.io/kasm-helm
✅ OCI: helm pull oci://ghcr.io/delta-whiplash/kasm --version 1.1181.0
✅ Chart lint passes

Closes #22

chenbishop and others added 12 commits November 17, 2025 12:22
1.18.1 pre-release

See merge request kasm-technologies/internal/kasm-helm!56
- Add GitHub Actions workflow for automated chart releases via GitHub Pages
- Add OCI registry publishing to ghcr.io with Sigstore attestations
- Add chart linting and validation workflow for PRs
- Add Dependabot for automated GitHub Actions updates
- Update README with three installation methods (OCI, HTTP, clone)
- Add SECURITY.md for vulnerability reporting
- Add CHANGELOG.md following Keep a Changelog format
- Add ct.yaml for chart-testing configuration
- Add CODEOWNERS for code ownership

Addresses issue kasmtech#22

All actions pinned to SHA for security:
- actions/checkout@v6.0.2
- azure/setup-helm@v5.0.0
- helm/chart-releaser-action@v1.7.0
- helm/chart-testing-action@v2.8.0
- actions/setup-python@v6.2.0
- actions/attest@v4.1.0
- Remove artifact attestation (GITHUB_TOKEN cannot sign on ghcr.io)
- Add GitHub Pages setup instructions in README
- Clarify prerequisites for Helm repository option
- Trigger on 'release/**' branches (upstream default: release/1.18.1)
- Auto-create gh-pages branch if missing (no manual setup needed)
- OCI triggers on push to release/** (upstream has 0 GitHub releases)
- Remove extras not requested in issue kasmtech#22 (SECURITY.md, CHANGELOG.md, CODEOWNERS, dependabot)
- Reorder README: HTTP repo first (primary solution for issue kasmtech#22)
- Revert Chart.yaml to original version 1.1181.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants