v0.18.0

Confidential Containers Helm Chart v0.18.0

Installation

From OCI Registry (Recommended)

# x86_64 (Intel/AMD)
helm install coco oci://ghcr.io/confidential-containers/charts/confidential-containers \
  --version 0.18.0 \
  --namespace coco-system

# s390x (IBM Z)
helm install coco oci://ghcr.io/confidential-containers/charts/confidential-containers \
  --version 0.18.0 \
  -f https://raw.githubusercontent.com/confidential-containers/charts/v0.18.0/values/kata-s390x.yaml \
  --namespace coco-system

# peer-pods (remote)
helm install coco oci://ghcr.io/confidential-containers/charts/confidential-containers \
  --version 0.18.0 \
  -f https://raw.githubusercontent.com/confidential-containers/charts/v0.18.0/values/kata-remote.yaml \
  --namespace coco-system

What's Included

• Chart Version: 0.18.0
• App Version: 0.18.0
• kata-deploy Version: 3.25.0

Supported Architectures

• x86_64 (Intel/AMD with SNP, TDX, NVIDIA GPU support)
• s390x (IBM Z with Secure Execution)
• peer-pods (Cloud API Adaptor integration)

Documentation

• Quick Start Guide
• Full Documentation

Changes Since v0.17.1

• Prepare release 0.18.0 (cebc095)
• docs: updated snippets (3a34c6e)
• kata: Bump to 3.25.0 release (3ac1711)
• feat: explicitly add NVIDIA GPU RuntimeClasses (aebef94)
• workflows: Fetch K8S version in GitHub runners and propagate it (e224dbe)
• workflows: Install yq regardless of deployment-type (bef5422)
• workflows: Extend env matrix to cover s390x test cases (30de07b)
• tests: Introduce cleanup workflows for self-hosted runners (eb2d906)
• tests: Determine architecture dynamically (be51a23)
• scripts: Introduce kubectl rollout status in verify_daemonset() (3f0b2f2)
• tests: Use quay.io/prometheus/busybox (dddf42a)
• scripts: Do not append stderr to stdout in retry_kubectl() (18689a6)
• docs: clarify Helm chart as official deployment method (b40acf8)

v0.17.1

Confidential Containers Helm Chart v0.17.1

Installation

From OCI Registry (Recommended)

# x86_64 (Intel/AMD)
helm install coco oci://ghcr.io/confidential-containers/charts/confidential-containers \
  --version 0.17.1 \
  --namespace coco-system

# s390x (IBM Z)
helm install coco oci://ghcr.io/confidential-containers/charts/confidential-containers \
  --version 0.17.1 \
  -f https://raw.githubusercontent.com/confidential-containers/charts/v0.17.1/values/kata-s390x.yaml \
  --namespace coco-system

# peer-pods (remote)
helm install coco oci://ghcr.io/confidential-containers/charts/confidential-containers \
  --version 0.17.1 \
  -f https://raw.githubusercontent.com/confidential-containers/charts/v0.17.1/values/kata-remote.yaml \
  --namespace coco-system

What's Included

• Chart Version: 0.17.1
• App Version: 0.17.1
• kata-deploy Version: 3.24.0

Supported Architectures

• x86_64 (Intel/AMD with SNP, TDX, NVIDIA GPU support)
• s390x (IBM Z with Secure Execution)
• peer-pods (Cloud API Adaptor integration)

Documentation

• Quick Start Guide
• Full Documentation

Changes Since v0.17.0

• fix(release): configure git identity for tag creation (0b44d7c)
• Prepare release 0.17.1 (48a04ac)
• fix(workflows): improve concurrency group for fork PRs (7ff0a3d)
• fix(prepare-release): add Signed-off-by to release commits (8b72ff7)
• fix(prepare-release): handle cross-fork PRs correctly (c79c0a2)
• fix: authenticate to ghcr.io before pulling helm dependencies (b140805)
• charts: Update lock file (3d584e0)
• kata: Bump to 3.24.0 release (603f2fc)
• values: add alibaba cloud chart to setup coco for baremetal TDX machine (d79a387)
• docs: add namespace creation parameter to helm install (8f2de03)

v0.17.0

What's Changed

• tests: Add a way to test what we ship by @fidencio in #4
• runtime: Allow deploying a new containerd into the nodes by @fidencio in #5
• actions: Unify all setup-k8s-* actions into single setup-k8s by @fidencio in #6
• maint: Add a release workflow and helper scripts by @fidencio in #7
• readme: Add information about stage & roadmap by @fidencio in #8
• actions: Move logic into scripts by @fidencio in #12
• runtime: Fix pullTypeMapping usage by @fidencio in #9
• tests: e2e: Ensure experimental_force_guest_pull is always tested by @fidencio in #13
• tests: e2e: Ensure we test using the values.yaml by @fidencio in #14
• runtime: Do not set defaultShim by @fidencio in #15
• General scripts / workflows improvements by @fidencio in #18
• tests: e2e: Always run a normal pod after uninstall by @fidencio in #16
• tests: e2e: Improve failure check by @fidencio in #19
• readme: Make clear that kata-as-coco-runtime-for-ci must be used for now by @fidencio in #21
• runtime: Update kata to its 3.22.0 release by @fidencio in #22
• kata: using profile overlay instead of dual dependencies by @beraldoleal in #23
• charts: Use coco-system as the default namespace by @fidencio in #25
• readme: Mark Container Runtimes support as ✅ by @fidencio in #27
• runtime: Adapt to the Kata Containers structured configuration by @fidencio in #28
• tests: e2e: Run nightly by @fidencio in #29
• kata: Bump to 3.23.0 release by @fidencio in #30
• e2e-tests: Also test with runtime-rs by @fidencio in #31
• docs: fix README markdown render by @Xynnn007 in #32
• charts: Release v0.17.0 by @fidencio in #34
• workflows: Fix the release workflow by @fidencio in #35

New Contributors

• @fidencio made their first contribution in #4
• @beraldoleal made their first contribution in #23
• @Xynnn007 made their first contribution in #32

Full Changelog: https://github.com/confidential-containers/charts/commits/v0.17.0