CFP: upload Helm charts to OCI registry and sign them with cosign #22157
Description
Cilium Feature Proposal
Is your feature request related to a problem?
With Helm v3.8.0, the OCI support became GA, which is an excellent chance to start publishing Helm charts to OCI-compliant registries. Because recently DockerHub announced that they are starting to support OCI Artifacts, so we can use DockerHub to store Helm charts on it. It also brings another opportunity to sign Helm charts stored as OCI Artifacts with cosign to provide their integrity and use GitOps tooling such as Flux to reconcile them as they were stored as OCI artifacts. Flux can reconcile OCI Artifacts and verify their integrity before reconciling them.
Describe the feature you'd like
So, here are following the task lists we need to complete:
- [ ] Upload Helm charts to OCI-compliant registries
- [ ] Sign them with cosign