jerry/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-10-27 12:40:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci(helm): publish chart to GHCR on chart-v* tags (#1372)

Browse Source 
Signed-off-by: Tyler Longwell <tlongwell@block.xyz>
Signed-off-by: npub12gtutshhh76rx0jx697f32f9tffd4hhp3hx58fp4x6u4uemkm7sqf8f757 <5217c5c2f7bfb4333e46d17c98a9255a52dadee18dcd43a43536b95e6776dfa0@sprout-oss.stage.blox.sqprod.co>
Co-authored-by: Tyler Longwell <tlongwell@block.xyz>
Co-authored-by: npub12gtutshhh76rx0jx697f32f9tffd4hhp3hx58fp4x6u4uemkm7sqf8f757 <5217c5c2f7bfb4333e46d17c98a9255a52dadee18dcd43a43536b95e6776dfa0@sprout-oss.stage.blox.sqprod.co>
This commit is contained in:
Tyler
2026-06-29 20:07:56 -04:00
committed by GitHub
parent 15a73aa27f
commit 2722ce4226
3 changed files with 195 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
deploy/charts/buzz/README.md
View File

@@ -90,7 +90,24 @@ Save these. Losing any of them is data loss. See NOTES.txt printed by `helm inst
currently stands up real Redis and S3 rather than the relay's single-node
fallbacks. (Full-text search already runs in Postgres, so no separate search
service is provisioned.)
- **OCI publish to GHCR + cosign signing** is a follow-up PR. For now, install the chart from source: `helm install buzz ./deploy/charts/buzz` after cloning the repo.
- **Cosign signing of the published chart** is a follow-up (the relay image is
attested via `actions/attest-build-provenance`; the chart is not yet). The
chart itself is published to GHCR — see [Releasing](#releasing).
## Releasing
The chart is published to GHCR as an OCI artifact at
`oci://ghcr.io/block/buzz/charts/buzz` by the `helm chart` workflow
(`.github/workflows/helm-chart.yml`), versioned independently of the desktop app
and the relay image via its own `chart-v*` tags. Every PR/`main` push still
lints, unit-tests, and render-checks the chart; only a `chart-v*` tag publishes,
so an in-progress `main` can never overwrite a released version.
To cut a release, push a `chart-release/<version>` branch whose `<version>`
matches `Chart.yaml`'s `version`; merging it auto-tags `chart-v<version>` and
dispatches the publish job (same lane machinery as the desktop and relay
releases — see `.github/workflows/auto-tag-on-release-pr-merge.yml`). The publish
job fails loudly if the tag version and `Chart.yaml` version disagree.
## Development