Upstream Issue Tracker

[onedr0p]

Pending Pull Requests

• k8stz: ci: push Helm Chart to GHCR k8tz/k8tz#118 by @onedr0p
• fluent-bit: ci: push charts to GHCR fluent/helm-charts#641 by @onedr0p
• crowdsec: ci: push charts to GHCR crowdsecurity/helm-charts#310 by @onedr0p

Open issues

• alloy: Add a support of OCI Helm chart grafana/alloy#2753
• authelia: Request: Upload Helm chart to OCI registry authelia/chartrepo#364
• cilium: CFP: upload Helm charts to OCI registry and sign them with cosign cilium/cilium#22157
• crossplane: Upload Helm chart to OCI registry crossplane/crossplane#6707
• dcgm-exporter: Request: Upload Helm chart to OCI registry NVIDIA/dcgm-exporter#466
• keda: Publish Helm chart to an OCI-compatible repo to support versioning kedacore/charts#20
• kubernetes-dashboard: Push Helm chart to an OCI registry kubernetes/dashboard#10416
• kubernetes-replicator: Request: Upload Helm chart to OCI registry mittwald/kubernetes-replicator#373
• longhorn: [FEATURE] OCI chart registry for Longhorn longhorn/longhorn#9450
• openebs*: Publish HelmCharts as OCI (Open Container Initative) format openebs/openebs#3742
• mongodb-kubernetes: Request: Upload Helm chart to OCI registry mongodb/helm-charts#387
• nvidia-device-plug-in: Request: Upload Helm chart to OCI registry NVIDIA/k8s-device-plugin#1209
• tailscale: FR: Deploy Tailscale operator helm chart to an OCI repo tailscale/tailscale#15536
• teleport-cluster: Request: Upload Helm chart to OCI registry gravitational/teleport#53168
• teleport-kube-agent: Request: Upload Helm chart to OCI registry gravitational/teleport#53168
• tigera-operator: Push Helm chart to an OCI registry projectcalico/calico#11376
• volsync: Upload Helm chart to OCI registry backube/volsync#1525

Note

The projects below are probably never going to have OCI charts until the Kubernetes SIGs leaders get off their encounter-suited butts and do something.

• csi-driver-nfs: Please publish Helm Chart to OCI kubernetes-csi/csi-driver-nfs#618
• descheduler: Publish helm chart also as an OCI package (e.g. on GHCR registry) kubernetes-sigs/descheduler#1470
• external-dns: Publish helm charts also as an OCI package kubernetes-sigs/external-dns#4630
• metrics-server: Publish helm chart also as an OCI package (e.g. on GHCR registry) kubernetes-sigs/metrics-server#1527

Upstream support added

• cert-manager: upload Helm charts to OCI registry and sign them with cosign cert-manager/cert-manager#5566 by maintainer
• democratic-csi: ci: push Helm Chart to GHCR democratic-csi/charts#66 by @onedr0p
• ext-postgres-operator: ci: push Helm Chart to GHCR movetokube/postgres-operator#222 @onedr0p
• headlamp: ci: push Helm Chart to GHCR kubernetes-sigs/headlamp#3024 by @onedr0p
• immich: Also release chart via OCI repository immich-app/immich-charts#25 by @bo0tzz
• ingress-nginx: Helm chart OCI support kubernetes/ingress-nginx#13513
• intel-device-plugins-operator: ci: push Helm Chart to GHCR intel/helm-charts#75 by @onedr0p
• intel-device-plugins-gpu: ci: push Helm Chart to GHCR intel/helm-charts#75 @onedr0p
• k8s-gateway: Publish Helm charts to OCI k8s-gateway/k8s_gateway#31 by @a1994sc
• kubelet-csr-approver: Upload Helm chart to OCI registry postfinance/kubelet-csr-approver#282 by @clementnuss
• metallb: feat(oci): publish chart to quay registry metallb/metallb#2647 by @a1994sc
• minecraft: Request: Upload Helm chart to OCI registry itzg/minecraft-server-charts#254 by @joryirving
• mc-router: Request: Upload Helm chart to OCI registry itzg/minecraft-server-charts#254 by @joryirving
• nextcloud: fix(ci): push Helm Chart to GHCR nextcloud/helm#720 by @onedr0p
• node-feature-discovery: Request: Upload Helm chart to OCI registry kubernetes-sigs/node-feature-discovery#2091
• onepassword-connect: ci: push Helm Chart to GHCR 1Password/connect-helm-charts#222 by @onedr0p
• reflector: Request: Upload Helm chart to OCI registry emberstack/kubernetes-reflector#482 by maintainer
• rook-ceph: feat: publish charts to OCI registry rook/rook#15218 by @a1994sc
• rook-ceph-cluster: feat: publish charts to OCI registry rook/rook#15218 by @a1994sc
• silence-operator: Upload Helm chart to OCI registry giantswarm/silence-operator#586 by maintainer
• silence-operator: ci: push Helm Chart to GHCR wiremind/wiremind-helm-charts#676 by @onedr0p
• silence-operator-crds: ci: push Helm Chart to GHCR wiremind/wiremind-helm-charts#676 by @onedr0p
• snapshot-controller: ci: push Helm Chart to GHCR piraeusdatastore/helm-charts#57 by @onedr0p

[onedr0p]

Charts with issue running as OCI

openebs

2025-03-14T02:06:41.621066016Z: warning: Upgrade "openebs" failed: pre-upgrade hooks failed: warning: Hook pre-upgrade openebs/templates/pre-upgrade-hook.yaml failed: 1 error occurred:
           * ServiceAccount "openebs-pre-upgrade-hook" is invalid: metadata.labels: Invalid value: "openebs-4.2.0+b2b6c7e5e584": a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyValue',  or 'my_value',  or '12345', regex used for validation is '(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?')
  Normal   RollbackSucceeded  29s  helm-controller  Helm rollback to previous release openebs-system/openebs.v15 with chart openebs@4.2.0 succeeded
  Warning  UpgradeFailed      12s  helm-controller  Helm upgrade failed for release openebs-system/openebs with chart openebs@4.2.0+b2b6c7e5e584: pre-upgrade hooks failed: warning: Hook pre-upgrade openebs/templates/pre-upgrade-hook.yaml failed: 1 error occurred:
           * ServiceAccount "openebs-pre-upgrade-hook" is invalid: metadata.labels: Invalid value: "openebs-4.2.0+b2b6c7e5e584": a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyValue',  or 'my_value',  or '12345', regex used for validation is '(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?')

Solved by disabling the helm hooks on install/upgrade or by using DisableChartDigestTracking feature gate with Flux.

---