Skip to content

ci: fix chart-release OCI 403 via repo-scoped namespace#6

Merged
prathamesh-sonpatki merged 1 commit intomainfrom
fix/chart-release-oci-path
Apr 20, 2026
Merged

ci: fix chart-release OCI 403 via repo-scoped namespace#6
prathamesh-sonpatki merged 1 commit intomainfrom
fix/chart-release-oci-path

Conversation

@prathamesh-sonpatki
Copy link
Copy Markdown
Member

@prathamesh-sonpatki prathamesh-sonpatki commented Apr 20, 2026

Summary

  • chart-release workflow pushed chart to oci://ghcr.io/last9/charts which is owned by the last9/charts repo. Cross-repo GITHUB_TOKEN lacks write → 403 Forbidden on blob uploads for l9gpu chart (see failed run 24650331091).
  • Switch OCI target to oci://ghcr.io/last9/gpu-telemetry — repo's own namespace, no cross-repo permissions needed.
  • Bump HELM_VERSION v3.14.0v3.15.4.

Test plan

  • After merge, bump Chart.yaml to 0.2.1 and push new tag chart-v0.2.1 to trigger workflow. Do NOT retag existing chart-v0.2.0.
  • Confirm chart-releaser packages l9gpu-0.2.1.tgz and uploads to GitHub release.
  • Confirm OCI push lands at oci://ghcr.io/last9/gpu-telemetry/l9gpu:0.2.1 with no 403.
  • Make OCI package public at https://github.com/orgs/last9/packages/container/gpu-telemetry%2Fl9gpu/settings.
  • helm pull oci://ghcr.io/last9/gpu-telemetry/l9gpu --version 0.2.1 succeeds.

chart-release workflow pushed to oci://ghcr.io/last9/charts which is
owned by another repository (last9/charts). GITHUB_TOKEN from this
repo lacks write permission there, causing 403 Forbidden on
l9gpu blob uploads.

Switch push target to oci://ghcr.io/last9/gpu-telemetry — the repo's
own ghcr namespace — so the chart can be published without cross-repo
package permissions.

Also bump HELM_VERSION v3.14.0 -> v3.15.4 to match l9gpu chart build
environment.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@prathamesh-sonpatki prathamesh-sonpatki merged commit b7116d3 into main Apr 20, 2026
13 checks passed
@prathamesh-sonpatki prathamesh-sonpatki deleted the fix/chart-release-oci-path branch April 20, 2026 14:49
prathamesh-sonpatki added a commit that referenced this pull request Apr 20, 2026
Bump l9gpu chart to 0.2.1 to re-publish with corrected OCI namespace
(ghcr.io/last9/gpu-telemetry instead of ghcr.io/last9/charts) per #6.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant