helm chart repository server
ChartMuseum v0.16.1 is a patch release. This release, we focused on bug fixes/dependency updates. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
Download ChartMuseum v0.16.1. The common platform binaries are here:
You can download the SBOM for this release in SPDX format here.
You can use a script to install on any system with bash.
ChartMuseum v0.16.0 is a feature release. This release, we focused on
The community keeps growing, and we'd love to see you there!
Download ChartMuseum v0.16.0. The common platform binaries are here:
You can download the SBOM for this release in SPDX format here.
You can use a script to install on any system with bash.
You can download the SBOM for this release in SPDX format here. You can use bom to inspect the contents:
curl -sL -o sbom.spdx https://get.helm.sh/chartmuseum-v0.16.0.spdx
bom document outline sbom.spdx
The SBOM has also been uploaded to the registry alongside the image, and can be fetched using cosign:
cosign download sbom ghcr.io/helm/chartmuseum:v0.16.0 --output-file=sbom.spdx
bom document outline sbom.spdx
In this release, we have integrated with the sigstore project to produce digital signatures of container images.
To verify these signatures, you can use cosign.
Verify the container image:
cosign verify ghcr.io/helm/chartmuseum:v0.16.0 \
--certificate-identity=https://github.com/helm/chartmuseum/.github/workflows/build.yml@refs/tags/v0.16.0 \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com | jq
Since the install script has used gpg in the past, signatures in this format have also been added (see .asc files attached to release). These were created with E97F 9DA5 AE2E 39CF 48A1 42B7 852A 7470 A39F B81D (@jdolitsky's GPG key) which can be found here and here.
github.com/ghodss/yaml with sigs.k8s.io/yaml (#692) 6c0976ff6b2b5f7019b467956f041cdce500c011 (Eng Zer Jun)keep-chart-always-up-to-date flag and the default cache interval when not set. (#593) 3ae6ed2d93b271ee474c093c4c8af82e44da239e (Nace Sc)ChartMuseum v0.15.0 is a feature release. This release, we focused on various new features plus some significant performance improvements. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
--disable-metrics has been renamed to --enable-metrics and the /metrics endpoint is now disabled by default--web-template-path flag (thanks @dirien! 🎉 )artifacthub-repo.yml files via the --artifact-hub-repo-id flagDownload ChartMuseum v0.15.0. The common platform binaries are here:
You can use a script to install on any system with bash.
You can download the SBOM for this release in SPDX format here. You can use bom to inspect the contents:
curl -sL -o sbom.spdx https://get.helm.sh/chartmuseum-v0.15.0.spdx
bom document outline sbom.spdx
The SBOM has also been uploaded to the registry alongside the image, and can be fetched using cosign:
cosign download sbom ghcr.io/helm/chartmuseum:v0.15.0 --output-file=sbom.spdx
bom document outline sbom.spdx
In this release, we have integrated with the sigstore project to produce digital signatures of container images.
To verify these signatures, you can use cosign.
Verify the container image:
COSIGN_EXPERIMENTAL=true cosign verify ghcr.io/helm/chartmuseum:v0.15.0 | jq .
Since the install script has used gpg in the past, signatures in this format have also been added (see .asc files attached to release). These were created with E97F 9DA5 AE2E 39CF 48A1 42B7 852A 7470 A39F B81D (@jdolitsky's GPG key) which can be found here and here.
ChartMuseum v0.14.0 is a feature release. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
#chartmuseum for discussing PRs, code, bugs, or just to hang outDownload ChartMuseum v0.14.0. The common platform binaries are here:
You can use a script to install on any system with bash.
You can download the SBOM for this release in SPDX format here. You can use bom to inspect the contents:
curl -sL -o sbom.spdx https://get.helm.sh/chartmuseum-v0.14.0.spdx
bom document outline sbom.spdx
The SBOM has also been uploaded to the registry alongside the image, and can be fetched using cosign:
cosign download sbom ghcr.io/helm/chartmuseum:v0.14.0 --output-file=sbom.spdx
bom document outline sbom.spdx
In this release, we have integrated with the sigstore project to produce digital signatures of all artifacts and container images.
To verify these signatures, you can use cosign.
Verify the container image:
COSIGN_EXPERIMENTAL=true cosign verify ghcr.io/helm/chartmuseum:v0.14.0 | jq .
Verify a specific artifact:
curl -sL -o artifact.tar.gz https://get.helm.sh/chartmuseum-v0.14.0-darwin-arm64.tar.gz
curl -sL -o artifact.tar.gz.sig https://get.helm.sh/chartmuseum-v0.14.0-darwin-arm64.tar.gz.sig
COSIGN_EXPERIMENTAL=true cosign verify-blob --signature artifact.tar.gz.sig artifact.tar.gz
Since the install script has used gpg in the past, signatures in this format have also been added (see .asc files attached to release). These were created with E97F 9DA5 AE2E 39CF 48A1 42B7 852A 7470 A39F B81D (@jdolitsky's GPG key) which can be found here and here.
v0.14.0-rc1
ChartMuseum v0.13.1 is a patch release. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
#chartmuseum for discussing PRs, code, bugs, or just to hang outDownload ChartMuseum v0.13.1. The common platform binaries are here:
This release was signed with E97F 9DA5 AE2E 39CF 48A1 42B7 852A 7470 A39F B81D (@jdolitsky's GPG key) which can be found here. Please use the attached signatures for verifying this release using gpg.
You can use a script to install on any system with bash.
ChartMuseum v0.13.0 is a feature release. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
#chartmuseum for discussing PRs, code, bugs, or just to hang outDownload ChartMuseum v0.13.0. The common platform binaries are here:
This release was signed with E97F 9DA5 AE2E 39CF 48A1 42B7 852A 7470 A39F B81D (@jdolitsky's GPG key) which can be found here. Please use the attached signatures for verifying this release using gpg.
You can use a script to install on any system with bash.
ChartMuseum v0.12.0 has been released with several new features, bug fixes, and updates:
--read-timeout and --write-timeout options for http timeout support (thanks @cpoole!)--storage-timestamp-tolerance option which fixes longstanding issue #152 (thanks @rajiteh!)ChartMuseum v0.11.0 has been released with support for Helm 3 charts! (charts with apiVersion: v2)
Packages imported from Helm have been migrated from the old k8s.io/helm/pkg to helm.sh/helm/v3/pkg. Special thanks to @karuppiah7890 for this.
Additionally, a new version of the helm-push plugin (v0.8.0) has been released with support for both Helm 2 and Helm 3 clients, and has been thoroughly tested:
helm plugin install https://github.com/chartmuseum/helm-push
If you have any issues using either ChartMuseum v0.11.0+ or helm-push v0.8.0+ with Helm 3, you are encouraged to open a GitHub issue, or you can also reach the maintainers in the Kubernetes Slack #chartmuseum channel.
Warning! This version has been reported to be incompatible with Helm 3 charts (apiVersion: 2). For more info, please see https://github.com/helm/chartmuseum/issues/293.
ChartMuseum v0.10.0 has been released with several new features, bug fixes, and updates:
--storage-etcd-endpoint flagmychart-1x-1.0.4-rc1-SNAPSHOT.tgz
HEAD /api/charts/:name and HEAD /api/charts/:name/:version routes to check if chart exists without loading from storageGET /api/charts?offset=10&limit=5
--cors-alloworigin flag to customize the Access-Control-Allow-Origin headerappVersion fields in index.yamlalpine:3.10.3)Thank you very much @guoweikuang, @cryptk, @prabhu43, @Dragotic, @argeas, @sbuvaneshkumar, @johanfleury, & @karuppiah7890!