Use GitHub Container Registry to Store Helm Chart

Instead of building and uploading the Helm Chart for the Vault Secrets
Operator to the https://github.com/ricoberger/helm-charts repository, we
are now using the GitHub Container Registry to store the Helm chart.

Starting with the new version 3.0.0 the Helm chart will only be
available at https://github.com/ricoberger/vault-secrets-operator/pkgs/container/charts%2Fvault-secrets-operator

.github/workflows/continuous-delivery.yaml

@@ -15,6 +15,7 @@ jobs:
     defaults:
       run:
         shell: bash
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -62,3 +63,34 @@ jobs:
           tags: |
             ghcr.io/${{ github.repository }}:${{ env.TAG }}
             ricoberger/vault-secrets-operator:${{ env.TAG }}
+
+  helm:
+    name: Helm
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main'
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set Version
+        id: version
+        run: |
+          echo VERSION=$(yq -r .version ./charts/vault-secrets-operator/Chart.yaml) >> $GITHUB_ENV
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+          registry: ghcr.io
+
+      - name: Package and Push Helm Chart
+        run: |
+          helm package ./charts/vault-secrets-operator --version ${{ env.VERSION }}
+          helm push ./vault-secrets-operator-${{ env.VERSION }}.tgz oci://ghcr.io/${{ github.repository_owner }}/charts

README.md

@@ -14,10 +14,7 @@ The **Vault Secrets Operator** creates Kubernetes secrets from Vault. The idea b
 The Vault Secrets Operator can be installed via Helm. A list of all configurable values can be found [here](./charts/README.md). The chart assumes a vault server running at `http://vault:8200`, but can be overidden by specifying `--set vault.address=https://vault.example.com`
 
 ```sh
-helm repo add ricoberger https://ricoberger.github.io/helm-charts
-helm repo update
-
-helm upgrade --install vault-secrets-operator ricoberger/vault-secrets-operator
+helm upgrade --install vault-secrets-operator oci://ghcr.io/ricoberger/vault-secrets-operator --version 3.0.0
 ```
 
 ### Prepare Vault

charts/vault-secrets-operator/Chart.yaml

@@ -8,4 +8,4 @@ maintainers:
   - name: Rico Berger
     url: https://ricoberger.de
 name: vault-secrets-operator
-version: 2.7.0
+version: 3.0.0