Store Charts in OCI Registries

Advanced15 minTrending

Push, pull, and manage Helm charts using OCI-compatible container registries like GitHub Container Registry, Docker Hub, and ECR.

Prerequisites

-Helm 3.8+ installed
-Access to an OCI-compatible registry
-Registry authentication configured

Steps

Login to an OCI registry

Authenticate with your container registry to push and pull charts.

$ helm registry login ghcr.io --username <github-username> --password <github-pat>

Use a personal access token with read:packages and write:packages scopes for GitHub Container Registry.

Package the chart

Create a chart archive ready for pushing to the registry.

$ helm package myapp/ --version 1.2.0

Push a chart to the OCI registry

Upload the packaged chart to your registry.

$ helm push myapp-1.2.0.tgz oci://ghcr.io/my-org/charts

Pull a chart from the OCI registry

Download a chart from the registry to your local machine.

$ helm pull oci://ghcr.io/my-org/charts/myapp --version 1.2.0

Install directly from OCI registry

Install a chart directly from an OCI reference without pulling first.

$ helm install my-release oci://ghcr.io/my-org/charts/myapp --version 1.2.0 --namespace production

View chart metadata in the registry

Inspect chart details without downloading it.

$ helm show chart oci://ghcr.io/my-org/charts/myapp --version 1.2.0

Full Script

full-script.sh

#!/bin/bash
# Helm OCI Registry Workflow
set -euo pipefail

CHART_DIR=${1:?"Usage: $0 <chart-dir> <registry-url>"}
REGISTRY=${2:?"Missing registry URL (e.g., oci://ghcr.io/my-org/charts)"}

# Extract chart name and version from Chart.yaml
CHART_NAME=$(grep '^name:' "$CHART_DIR/Chart.yaml" | awk '{print $2}')
CHART_VERSION=$(grep '^version:' "$CHART_DIR/Chart.yaml" | awk '{print $2}')

echo "=== Chart: $CHART_NAME v$CHART_VERSION ==="

echo ""
echo "=== Linting ==="
helm lint "$CHART_DIR" --strict

echo ""
echo "=== Packaging ==="
helm package "$CHART_DIR"

PACKAGE_FILE="$CHART_NAME-$CHART_VERSION.tgz"

echo ""
echo "=== Pushing to $REGISTRY ==="
helm push "$PACKAGE_FILE" "$REGISTRY"

echo ""
echo "=== Verifying ==="
helm show chart "$REGISTRY/$CHART_NAME" --version "$CHART_VERSION"

echo ""
echo "Chart published: $REGISTRY/$CHART_NAME:$CHART_VERSION"
echo "Install with: helm install <release> $REGISTRY/$CHART_NAME --version $CHART_VERSION"

FAQ

Discussion

Loading comments...

#!/bin/bash # Helm OCI Registry Workflow set -euo pipefail CHART_DIR=${1:?"Usage: $0 <chart-dir> <registry-url>"} REGISTRY=${2:?"Missing registry URL (e.g., oci://ghcr.io/my-org/charts)"} # Extract chart name and version from Chart.yaml CHART_NAME=$(grep '^name:' "$CHART_DIR/Chart.yaml" | awk '{print $2}') CHART_VERSION=$(grep '^version:' "$CHART_DIR/Chart.yaml" | awk '{print $2}') echo "=== Chart: $CHART_NAME v$CHART_VERSION ===" echo "" echo "=== Linting ===" helm lint "$CHART_DIR" --strict echo "" echo "=== Packaging ===" helm package "$CHART_DIR" PACKAGE_FILE="$CHART_NAME-$CHART_VERSION.tgz" echo "" echo "=== Pushing to $REGISTRY ===" helm push "$PACKAGE_FILE" "$REGISTRY" echo "" echo "=== Verifying ===" helm show chart "$REGISTRY/$CHART_NAME" --version "$CHART_VERSION" echo "" echo "Chart published: $REGISTRY/$CHART_NAME:$CHART_VERSION" echo "Install with: helm install <release> $REGISTRY/$CHART_NAME --version $CHART_VERSION"