Migrate to custom oci registry

Signed-off-by: Bryan Frimin <bryan@probo.com>

contrib/helm/README.md

@@ -18,7 +18,20 @@ Before deploying Probo, ensure you have:
 
 ## Install
 
-#### Using Local Chart
+### From OCI Registry
+
+```bash
+helm install my-probo oci://artifact.probo.inc/probo/probo --version <chart-version>
+```
+
+Replace `<chart-version>` with a released chart version (e.g. `0.1.0`). The
+chart defaults to the probod image tag `v<appVersion>` from
+`Chart.yaml`.
+
+Configure secrets and external services with `--set` flags or a values file
+(see [Helm Chart Documentation](charts/probo/README.md)).
+
+### From Local Chart
 
 ##### Generate Secrets
 
@@ -302,7 +315,7 @@ spec:
 | Key                                                     | Type    | Default                                            | Description                                                                                         |
 |---------------------------------------------------------| ------- |----------------------------------------------------|-----------------------------------------------------------------------------------------------------|
 | replicaCount                                            | int     | `1`                                                | Number of Probo application replicas                                                                |
-| image.repository                                        | string  | `"ghcr.io/getprobo/probo"`                         | Container image repository                                                                          |
+| image.repository                                        | string  | `"artifact.probo.inc/probo/probo"`                 | Container image repository                                                                          |
 | image.pullPolicy                                        | string  | `"IfNotPresent"`                                   | Image pull policy                                                                                   |
 | image.tag                                               | string  | `"latest"`                                         | Overrides the image tag whose default is the chart appVersion                                       |
 | imagePullSecrets                                        | list    | `[]`                                               | Image pull secrets for private registries                                                           |

contrib/helm/charts/probo/CHANGELOG.md

@@ -0,0 +1,5 @@
+# Changelog
+
+All notable changes to the Probo Helm chart will be documented in this file.
+
+## Unreleased

contrib/helm/charts/probo/Chart.yaml

@@ -3,7 +3,7 @@ name: probo
 description: A Helm chart for deploying Probo - Open Source Compliance Platform
 type: application
 version: 0.1.0
-appVersion: "0.74.7"
+appVersion: "0.191.0"
 keywords:
   - compliance
   - soc2

contrib/helm/charts/probo/README.md

@@ -12,7 +12,25 @@ This Helm chart deploys Probo - an open-source SOC-2 compliance platform - on Ku
 
 ## Installing the Chart
 
-### Generate Required Secrets
+### From OCI Registry
+
+```bash
+helm install probo oci://artifact.probo.inc/probo/probo --version <chart-version> \
+  --set probo.baseUrl="probo.example.com" \
+  --set probo.encryptionKey="$ENCRYPTION_KEY" \
+  --set probo.auth.cookieSecret="$COOKIE_SECRET" \
+  --set probo.auth.passwordPepper="$PASSWORD_PEPPER" \
+  --set probo.trustAuth.tokenSecret="$TRUST_TOKEN_SECRET" \
+  --set postgresql.host="postgres.example.com" \
+  --set postgresql.password="<db-password>" \
+  --set s3.bucket="probo-production" \
+  --set s3.accessKeyId="<aws-access-key-id>" \
+  --set s3.secretAccessKey="<aws-secret-access-key>"
+```
+
+### From Local Chart
+
+#### Generate Required Secrets
 
 ```bash
 # Generate required secrets
@@ -63,7 +81,7 @@ For production, create a `values-production.yaml` file:
 ```yaml
 # values-production.yaml
 image:
-  repository: ghcr.io/getprobo/probo
+  repository: artifact.probo.inc/probo/probo
   tag: "0.74.7"
 
 replicaCount: 3
@@ -147,7 +165,7 @@ The following parameters **must** be configured:
 
 | Parameter              | Description                     | Default |
 |------------------------|---------------------------------|---------|
-| `image.repository`     | Probo image repository          | `ghcr.io/getprobo/probo` |
+| `image.repository`     | Probo image repository          | `artifact.probo.inc/probo/probo` |
 | `image.tag`            | Probo image tag                 | Chart appVersion |
 | `replicaCount`         | Number of Probo replicas        | `1` |
 | `probo.baseUrl`        | Public baseUrl                  | `probo.example.com` |

contrib/helm/charts/probo/templates/deployment.yaml

@@ -35,7 +35,7 @@ spec:
         - name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default (printf "v%s" .Chart.AppVersion) }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           env:
             - name: CONFIG_FILE

contrib/helm/charts/probo/values-production.yaml.example

@@ -4,7 +4,7 @@
 
 # Use specific version tag
 image:
-  repository: ghcr.io/getprobo/probo
+  repository: artifact.probo.inc/probo/probo
   tag: "0.74.7"
   pullPolicy: IfNotPresent
 

contrib/helm/charts/probo/values.yaml

@@ -5,10 +5,10 @@
 replicaCount: 1
 
 image:
-  repository: ghcr.io/getprobo/probo
+  repository: artifact.probo.inc/probo/probo
   pullPolicy: Always
   # Overrides the image tag whose default is the chart appVersion.
-  tag: "latest"
+  tag: ""
 
 imagePullSecrets: []
 nameOverride: ""