Helm plugin to push chart package to ChartMuseum
Based on the version in plugin.yaml, release binary will be downloaded from GitHub:
$ helm plugin install https://github.com/chartmuseum/helm-push
Downloading and installing helm-push v0.5.0 ...
https://github.com/chartmuseum/helm-push/releases/download/v0.5.0/helm-push_0.5.0_darwin_amd64.tar.gz
Installed plugin: push
Start by adding a ChartMuseum-backed repo via Helm CLI (if not already added)
$ helm repo add chartmuseum http://localhost:8080
For all available plugin options, please run
$ helm push --help
Point to a directory containing a valid Chart.yaml and the chart will be packaged and uploaded:
$ cat mychart/Chart.yaml
name: mychart
version: 0.3.2
$ helm push mychart/ chartmuseum
Pushing mychart-0.3.2.tgz to chartmuseum...
Done.
The --version flag can be provided, which will push the package with a custom version.
Here is an example using the last git commit id as the version:
$ helm push mychart/ --version="$(git log -1 --pretty=format:%h)" chartmuseum
Pushing mychart-5abbbf28.tgz to chartmuseum...
Done.
If you want to enable something like --version="latest", which you intend to push regularly, you will need to run your ChartMuseum server with ALLOW_OVERWRITE=true.
This workflow does not require the use of helm package, but pushing .tgzs is still suppported:
$ helm push mychart-0.3.2.tgz chartmuseum
Pushing mychart-0.3.2.tgz to chartmuseum...
Done.
If your ChartMuseum install is configured with ALLOW_OVERWRITE=true, chart versions will be automatically overwritten upon re-upload.
Otherwise, unless your install is configured with DISABLE_FORCE_OVERWRITE=true (ChartMuseum > v0.7.1), you can use the --force/-f option to to force an upload:
$ helm push --force mychart-0.3.2.tgz chartmuseum
Pushing mychart-0.3.2.tgz to chartmuseum...
Done.
If the second argument provided resembles a URL, you are not required to add the repo prior to push:
$ helm push mychart-0.3.2.tgz http://localhost:8080
Pushing mychart-0.3.2.tgz to http://localhost:8080...
Done.
If you have added your repo with the --username/--password flags (Helm 2.9+), or have added your repo with the basic auth username/password in the URL (e.g. https://myuser:[email protected]), no further setup is required.
The plugin will use the auth info located in ~/.helm/repository/repositories.yaml in order to authenticate.
If you are running ChartMuseum with AUTH_ANONYMOUS_GET=true, and have added your repo without authentication, the plugin recognizes the following environment variables for basic auth on push operations:
$ export HELM_REPO_USERNAME="myuser"
$ export HELM_REPO_PASSWORD="mypass"
With this setup, you can enable people to use your repo for installing charts etc. without allowing them to upload to it.
Although ChartMuseum server does not define or accept a token format (yet), if you are running it behind a proxy that accepts access tokens, you can provide the following env var:
$ export HELM_REPO_ACCESS_TOKEN="<token>"
This will result in all basic auth options above being ignored, and the plugin will send the token in the header:
Authorization: Bearer <token>
If you require a custom header to be used for passing the token, you can the following env var:
$ export HELM_REPO_AUTH_HEADER="<myheader>"
This will then be used in place of Authorization: Bearer:
<myheader>: <token>
This plugin also defines the cm:// protocol that you may specify when adding a repo:
$ helm repo add chartmuseum cm://my.chart.repo.com
The only real difference with this vs. simply using http/https, is that the environment variables above are recognized by the plugin and used to set the Authorization header appropriately. As in, if you do not add your repo in this way, you are unable to use token-based auth for GET requests (downloading index.yaml, chart .tgzs, etc).
By default, cm:// translates to https://. If you must use http://, you can set the following env var:
$ export HELM_REPO_USE_HTTP="true"