Helm Chart versions ahead of published container images

[shtoak]

Helm chart versions 1.1.1 through 1.1.6 have been published to GHCR

(ghcr.io/l3montree-dev/devguard-helm-chart/devguard) but the corresponding
container images referenced by appVersion do not exist on GHCR, making these
chart versions uninstallable.
 

Affected Versions

| Chart Version | appVersion | API Image | Web Image | PostgreSQL Image |
|---|---|---|---|---|
| 1.1.1 | v1.1.1 | ❌ 404 | ❌ 404 | ❌ 404 |
| 1.1.2 | v1.1.2 | ❌ 404 | ❌ 404 | ❌ 404 |
| 1.1.3 | v1.1.3 | ❌ 404 | ❌ 404 | ❌ 404 |
| 1.1.4 | v1.1.4 | ❌ 404 | ❌ 404 | ❌ 404 |
| 1.1.5 | v1.1.5 | ❌ 404 | ❌ 404 | ❌ 404 |
| 1.1.6 | v1.1.6 | ❌ 404 | ❌ 404 | ❌ 404 |
| 1.1.0 | v1.1.0 | ✅ 200 | ✅ 200 | ✅ 200 | ← last working version |
 

Images checked

• ghcr.io/l3montree-dev/devguard:v1.1.x
• ghcr.io/l3montree-dev/devguard-web:v1.1.x
• ghcr.io/l3montree-dev/devguard/postgresql:v1.1.x
   

Steps to Reproduce

# Install chart 1.1.6 — pods will fail with ImagePullBackOff
helm install devguard \
oci://ghcr.io/l3montree-dev/devguard-helm-chart/devguard \
--version 1.1.6 --namespace devguard --create-namespace
 
# Verify images don't exist
for img in "devguard" "devguard-web" "devguard/postgresql"; do
echo -n "ghcr.io/l3montree-dev/$img:v1.1.6 → "
TOKEN=$(curl -s "https://ghcr.io/token?scope=repository:l3montree-dev/${img}:pull" \| jq -r .token)
curl -s -o /dev/null -w "%{http_code}\n" \
"https://ghcr.io/v2/l3montree-dev/${img}/manifests/v1.1.6" \
-H "Authorization: Bearer $TOKEN" \
-H "Accept: application/vnd.oci.image.manifest.v1+json"
done

 

Expected Behavior

Each chart release should have corresponding container images published to GHCR
with the matching appVersion tag before or at the same time as the chart is published.
 

Actual Behavior

helm show chart resolves appVersion: v1.1.6 correctly, and helm template
renders the correct image references, but pulling the images fails with 404
because the tags were never published to GHCR.
 

Workaround

Pin to chart version 1.1.0 which is the latest version with all images confirmed available:
 

helm install devguard \
oci://ghcr.io/l3montree-dev/devguard-helm-chart/devguard \
--version 1.1.0 --namespace devguard --create-namespace \
-f values.yaml

 

Environment

• Kubernetes: k3s v1.x
• Helm: v3.x
• Platform: AWS EC2 Ubuntu