Helm Charts

Helm charts for Chainguard products.

Usage

Charts are available in the following formats:

• Chart Repository

Installing from the Chart Repository

The following command can be used to add the chart repository:

helm repo add chainguard https://chainguard-dev.github.io/helm-charts
helm repo update

Once the chart repository has been added, install one of the available charts:

helm upgrade -i <release_name> chainguard/<chart_name>

Provenance

Charts are signed using the provenance methods provided by the Helm project as well as uploaded to the Rekor transparency server using the Helm sigstore plugin.

Verification of the signed charts can be accomplished by importing the GPG Public Key that was used to sign the associated chart.

cat security/pubkey.gpg | gpg --import --batch

Once the public key has been imported, charts can be verified using the helm verify and/or helm chainguard verify commands.

Note: The public key that was used to sign a particular chart may not be identical to the public key on the main branch. Each chart release has an associated git tag. The public key that was used to sign the particular chart will be included in this tag.

Charts

• enforce-agent - docs