Per docs/v1-rc1-operational-gaps.md §2 Air-gapped install, remediation step 1.
Today the chart at install/kubernetes/tracecore/ is in-repo only. Air-gapped operators must git clone to get it. Per docs/getting-started.md:96, the OCI chart path is a post-PR-L target.
Work: add a chart-publish job to .github/workflows/release.yml that runs helm package + helm push oci://ghcr.io/tracecoreai/charts/tracecore. Sign with cosign keyless using the same identity binding as binary + image.
Acceptance: helm pull oci://ghcr.io/tracecoreai/charts/tracecore --version <tag> succeeds on a fresh host; cosign verify oci://ghcr.io/tracecoreai/charts/tracecore:<tag> succeeds with the workflow identity regex.
Effort: S.
Per
docs/v1-rc1-operational-gaps.md§2 Air-gapped install, remediation step 1.Today the chart at
install/kubernetes/tracecore/is in-repo only. Air-gapped operators mustgit cloneto get it. Perdocs/getting-started.md:96, the OCI chart path is a post-PR-L target.Work: add a
chart-publishjob to.github/workflows/release.ymlthat runshelm package+helm push oci://ghcr.io/tracecoreai/charts/tracecore. Sign with cosign keyless using the same identity binding as binary + image.Acceptance:
helm pull oci://ghcr.io/tracecoreai/charts/tracecore --version <tag>succeeds on a fresh host;cosign verify oci://ghcr.io/tracecoreai/charts/tracecore:<tag>succeeds with the workflow identity regex.Effort: S.