From d802941faa6ac58634cb25047c72e77f1a635682 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20J=C3=B6rg?= <moritz.jorg@oceanbox.io>
Date: Mon, 9 Feb 2026 16:00:26 +0100
Subject: [PATCH] fix(cilium): Switch to oci chart Why OCI Registries?
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Storing Helm charts in OCI registries alongside container images offers several advantages:

- Signed charts — All charts are signed with cosign for verification
- Simpler setup — No repository configuration needed
- Digest pinning — Reference exact chart versions by SHA for reproducibility
- Unified tooling — Use the same registry infrastructure for images and charts
---
 helmfile.d/cilium.yaml.gotmpl | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/helmfile.d/cilium.yaml.gotmpl b/helmfile.d/cilium.yaml.gotmpl
index 6e91afd3..455d18cb 100644
--- a/helmfile.d/cilium.yaml.gotmpl
+++ b/helmfile.d/cilium.yaml.gotmpl
@@ -3,7 +3,8 @@ bases:
 
 repositories:
 - name: cilium
-  url: 'https://helm.cilium.io'
+  oci: true
+  url: 'quay.io/cilium/charts'
 
 commonLabels:
   tier: system