Helm charts are outdated and not automatically published.
- Dominant language
- Go
- Stars
- 140
- Forks
- 45
- Avg merge
- 4d 3h
- Merged PRs (30d)
- 2
Description
Currently the publishing of the GHCR OCI artifact is done only via workflow_dispatch (manual)
https://github.com/Azure/aks-mcp/blob/main/.github/workflows/publish-helm-chart.yml
After [this PR ](https://github.com/Azure/aks-mcp/pull/382)the :latest GHCR docker image no longer works with the helm chart in --streamable-http mode as we cannot set allowedHosts
```
security:
allowedHosts:
---
```
This makes this error appear:
```
Validation failed: │
│ transport "streamable-http" bound to non-loopback host "0.0.0.0" without OAuth and without --allowed-host: refusing to start to avoid DNS-rebinding exposure; choose │
│ one of: (a) bind --host 127.0.0.1, (b) --oauth-enabled, (c) --allowed-host=
```
Contributor guide
Research direction
Start with .github/workflows/publish-helm-chart.yml and compare its manual publishing behavior with the chart and image changes from PR #382. Check how the Helm chart supplies allowedHosts in streamable-http mode, then verify that the chart is automatically published and no longer produces the reported validation error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, github-actions, helm, kubernetes
- Domain
- cloud, devops
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100