DEMO Push Helm Chart to OCI Registry

In this demo, you’ll learn how to package a Helm chart from your project and publish it to the GitHub Container Registry (GHCR) using the OCI protocol. We’ll cover everything from exploring the directory layout to pulling the chart artifact.

Inspect the Project Structure

Open your project in Visual Studio Code on the 7-demo branch. In the Explorer pane, you’ll find a 7.7.1 directory containing your Helm chart sources alongside your application code:

The image shows a Visual Studio Code interface with a file explorer on the left and a terminal at the bottom, displaying a command prompt in a directory named "7-demo".

$ tree 7.7.1
7.7.1
└── helm-chart
    ├── Chart.yaml
    ├── values.yaml
    └── templates
        ├── NOTES.txt
        ├── _helpers.tpl
        ├── deployment.yaml
        └── service.yaml

$ tree src
src
├── Dockerfile
├── highscore.php
└── images
    ├── level1.png
    └── level2.png

Prerequisite: Install Helm v3.11.2+

Make sure you have Helm version 3.11.2 or later:

$ helm version
version.BuildInfo{Version:"v3.11.2", GitCommit:"...", GitTreeState:"clean", GoVersion:"go1.18.10"}

If you see warnings about your kubeconfig file being group- or world-readable, consider tightening permissions:

chmod 600 ~/.kube/config

Step 1: Package the Helm Chart

Run the following command in your project root. This generates a compressed chart archive (.tgz):

$ helm package 7.7.1/helm-chart/
Successfully packaged chart and saved it to: block-buster-helm-app-7.7.1.tgz

Step 2: Authenticate to GHCR

$ helm registry login ghcr.io --username YOUR_GITHUB_USERNAME
Password: <YOUR_PERSONAL_ACCESS_TOKEN>
Login Succeeded

Your token should have the read:packages and write:packages scopes to push and pull images.

Step 3: Push the Chart to the OCI Repository

Push the packaged chart to your GHCR repository under your namespace:

$ helm push block-buster-helm-app-7.7.1.tgz oci://ghcr.io/YOUR_GITHUB_USERNAME/bb-app
Pushed: ghcr.io/YOUR_GITHUB_USERNAME/bb-app:7.7.1
Digest: sha256:87b78637863479fa843cd7c2951911285eacd089ff10e6a

Step 4: Verify the Package in GitHub

Go to your GitHub repository.
Click on Packages in the sidebar.
You should see block-buster-helm-app with version 7.7.1 listed.

Step 5: Pull the OCI Artifact

Retrieve the chart archive using Docker or any OCI-compliant client:

$ docker pull ghcr.io/YOUR_GITHUB_USERNAME/bb-app:7.7.1

Summary of Commands

Step	Command	Description
Verify Helm version	`helm version`	Check installed Helm version
Package chart	`helm package <chart-path>`	Create a `.tgz` archive
Authenticate to GHCR	`helm registry login ghcr.io --username <user>`	Log in with GitHub credentials
Push chart	`helm push <archive>.tgz oci://ghcr.io/<user>/<repo>`	Upload chart to OCI registry
Pull chart	`docker pull ghcr.io/<user>/<repo>:<version>`	Download chart artifact

GitOps Overview

Flux Overview

Source and Kustomize Controller

Helm Controller and OCI Registry

Image Automation Controller

Secret Management & Sign Verification

Notification Controller

Monitoring & User Interface

DEMO Push Helm Chart to OCI Registry

Inspect the Project Structure

Prerequisite: Install Helm v3.11.2+

Step 1: Package the Helm Chart

Step 2: Authenticate to GHCR

Step 3: Push the Chart to the OCI Repository

Step 4: Verify the Package in GitHub

Step 5: Pull the OCI Artifact

Summary of Commands

Links and References

Watch Video

​Inspect the Project Structure

​Prerequisite: Install Helm v3.11.2+

​Step 1: Package the Helm Chart

​Step 2: Authenticate to GHCR

​Step 3: Push the Chart to the OCI Repository

​Step 4: Verify the Package in GitHub

​Step 5: Pull the OCI Artifact

​Summary of Commands

​Links and References

Watch Video

Inspect the Project Structure

Prerequisite: Install Helm v3.11.2+

Step 1: Package the Helm Chart

Step 2: Authenticate to GHCR

Step 3: Push the Chart to the OCI Repository

Step 4: Verify the Package in GitHub

Step 5: Pull the OCI Artifact

Summary of Commands

Links and References