If our organization publish Helm charts to Docker Hub, is it possible to get verified publisher badge?

[outcoldman]

I did include artifacthub-repo.yaml in each chart, but based on the docs "and it must be served from the chart repository HTTP server as well" - I assume Docker Hub would not do that. Why this requirement even exists? Why this file cannot be just located in the tgz of the archive/package?

[tegioz]

Hi @outcoldman 👋

That file is the Artifact Hub repository metadata file, and it covers all content in your repository, which may contain multiple charts (and multiple of versions of each chart). The content would be always the same, so it seems unnecessary to have lots of copies of the same file (eventually with stale content). Multiple copies could also lead to inconsistencies and problems.

We need to access that file to make some repository level decisions in some cases (i.e. like transferring it to a different user/org). Having to process a repository, get "some" chart archive (of which chart? latest version?), and extract its contents to look for a file that's actually not even part of the Helm chart, wouldn't probably be very efficient.

Hope this helps 🙂

[outcoldman]

I understand the reason, but that means the answer to my main question would be - it is impossible to get a verified badge if you publish helm charts to Docker Hub.

[tegioz]

You still can, please see: https://artifacthub.io/docs/topics/repositories/helm-charts/#oci-support

[outcoldman]

Thank you! That is exactly what I was looking for.