Support OCI chart repositories #275
Labels
enhancement
Adding additional functionality or improvements
help wanted
Extra attention is needed
priority: could
Future work depending on bandwidth and availability
stale
Marked as stale by stalebot
Is your feature request related to a problem? Please describe.
OCI is supported by Helm since Jan 2022.
This is becoming the main distribution channel for Helm charts, since it piggybacks on Docker registries and facilitates scanning & policies applications.
As of today, Nova cannot use OCI repositories, since it depends on the package list of ChartMuseum format. It would be a good step
Some popular registries (harbor for instance) are migrating to OCI-only support, and thus cannot be used when scanning with the current Nova software.
Describe the solution you'd like
I would like nova to implement the ability to scan for semver versions of charts in an OCI repository. It is possible already using the Helm command line like this:
helm show crds oci://my-repository_url/my-chart
which shows the latest helm chart found on the OCI repoDescribe alternatives you've considered
There are many helm chart "exporters" out there, but none of them has proper OCI support. Even helm-exporter has closed his issue about this.
Additional context
Note that the OCI spec doesn't specify a "search" axiom (it is in the works, or least identified).
The text was updated successfully, but these errors were encountered: