Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support OCI chart repositories #275

Closed
Gui13 opened this issue Dec 8, 2023 · 2 comments
Closed

Support OCI chart repositories #275

Gui13 opened this issue Dec 8, 2023 · 2 comments
Labels
enhancement Adding additional functionality or improvements help wanted Extra attention is needed priority: could Future work depending on bandwidth and availability stale Marked as stale by stalebot

Comments

@Gui13
Copy link

Gui13 commented Dec 8, 2023

Is your feature request related to a problem? Please describe.

OCI is supported by Helm since Jan 2022.

This is becoming the main distribution channel for Helm charts, since it piggybacks on Docker registries and facilitates scanning & policies applications.
As of today, Nova cannot use OCI repositories, since it depends on the package list of ChartMuseum format. It would be a good step

Some popular registries (harbor for instance) are migrating to OCI-only support, and thus cannot be used when scanning with the current Nova software.

Describe the solution you'd like

I would like nova to implement the ability to scan for semver versions of charts in an OCI repository. It is possible already using the Helm command line like this:

helm show crds oci://my-repository_url/my-chart which shows the latest helm chart found on the OCI repo

Describe alternatives you've considered

There are many helm chart "exporters" out there, but none of them has proper OCI support. Even helm-exporter has closed his issue about this.

Additional context

Note that the OCI spec doesn't specify a "search" axiom (it is in the works, or least identified).

@Gui13 Gui13 added enhancement Adding additional functionality or improvements triage This bug needs triage labels Dec 8, 2023
@sudermanjr
Copy link
Member

Agreed, this would be a very good thing to add to Nova as OCI becomes common.

@sudermanjr sudermanjr added help wanted Extra attention is needed priority: should Should be addressed shortly priority: could Future work depending on bandwidth and availability and removed triage This bug needs triage priority: should Should be addressed shortly labels Dec 8, 2023
@github-actions github-actions bot added the stale Marked as stale by stalebot label Feb 7, 2024
@Gui13
Copy link
Author

Gui13 commented Feb 14, 2024

@sudermanjr the issue is being closed as completed, without any commit indicating that the work has been done.

Did you guys implement it in a "paid" version?

I am actually interested in using it, even commercially.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Adding additional functionality or improvements help wanted Extra attention is needed priority: could Future work depending on bandwidth and availability stale Marked as stale by stalebot
Projects
None yet
Development

No branches or pull requests

2 participants