Create and package a chart

helm create my-chart
helm package ./my-chart

helm package writes my-chart-0.1.0.tgz to the current directory. The name and the version in my-chart/Chart.yaml identify the chart in Repsy: the name has to be lower case letters, digits and -, and the version has to be a semantic version without a v in front, see Managing Chart Versions.

Log in to the registry

helm registry login <your-repsy-host> \
  --username <username> \
  --password-stdin

--password-stdin makes Helm read the password from the standard input, so it does not show up in your shell history or in the list of processes: pipe it in from a file or a secret. helm registry login takes the host of your instance, with the port if it has one, and no repository name. Repsy checks the credentials when you log in, so a wrong password fails here with 401 Unauthorized. A Read Only deploy token logs in successfully and is refused later, when you push.

Helm keeps the login in its registry configuration file, and helm push, helm pull and helm install use it for this host until you run helm registry logout <host>.

Push the chart

helm push my-chart-0.1.0.tgz oci://<your-repsy-host>/<repo-name>

Pushed: <your-repsy-host>/<repo-name>/my-chart:0.1.0
Digest: sha256:b9dcc0249ae5b00b8b02ead42d58dfc7f7f809dd97702ae952c57d336a13bb19

Give helm push the address of the repository, without the name of the chart. Helm adds the chart name and the version from Chart.yaml itself: the chart is stored as my-chart under the tag 0.1.0. If you add the chart name to the address, the request goes to <repo-name>/my-chart/my-chart and Repsy answers 404 with unknownPath.

Verify the result in the web UI

1. Sign in to the web UI and open the Repositories tab. Open your repository.
2. The list has one row per chart, with its latest version, its description and when it was updated. Open the chart to see its versions, and open a version to see its details.
3. The details show the digest and the size of the chart, the Chart.yaml metadata, and the ready-made helm install command for the classic protocol and helm pull command for OCI.

To check what an OCI client will see, request the tags of the chart:

curl -u <username>:<password-or-token> https://<your-repsy-host>/v2/<repo-name>/my-chart/tags/list

{"name":"my-chart","tags":["0.1.0"]}

The address of the OCI API starts with /v2/ directly after the host, and the repository name follows it.

Pull and install

Download the chart, or install it into your cluster:

helm pull oci://<your-repsy-host>/<repo-name>/my-chart --version 0.1.0
helm install my-release oci://<your-repsy-host>/<repo-name>/my-chart --version 0.1.0

This time the address contains the chart name after the repository name. helm pull writes my-chart-0.1.0.tgz to the current directory, and --destination <directory> puts it into a directory that already exists. Without --version, and with a version range such as --version ">=0.1.0", Helm asks Repsy for the tags of the chart and takes the newest matching version.

To look into a chart without downloading it, use helm show chart, helm show values or helm template with the same address.

A public repository needs no helm registry login to pull or install. A Read Only deploy token is enough for a private repository.