Part 5
3 chapters
Distribution and supply chain
Packaging and SemVer, classic repositories, OCI registries, provenance files and cosign.
Chapter 19
Packaging and repositories
Turn the shipping-service chart into a versioned 1.0.0 archive, index it, and serve it as a classic chart repository you can add, search and install from.
Chapter 20
OCI registries
Push the shipping-service 1.0.0 package to an OCI registry, pull and inspect it, log in, pin an install by digest, and pull a dependency from a registry.
Chapter 21
Provenance and signing
Sign the shipping-service package with a Helm provenance file, verify it on pull and install, then sign the OCI artifact with cosign and watch both checks reject a tampered chart.