Issue with the GitOps and OCI way

[Davidffry]

When I want to install bitnami/keycloak I facing about this issue : 2023-10-04T16:22:58.575Z error HelmChart/default-keycloak.flux-system - Reconciler error chart pull error: failed to download chart for remote reference: failed to get 'oci://registry-1.docker.io/bitnamicharts/keycloak/keycloak:17.0.0': pull access denied, repository does not exist or may require authorization: server message: insufficient_scope: authorization failed

The chart helm :

╭─david ~/flux/prod
╰─$ flux get sources helm          
NAME    	REVISION	SUSPENDED	READY	MESSAGE                  
keycloak	        	False    	True 	Helm repository is ready	                                                                                                                                                                                                                                                                                                 /0,3s
╭─david ~/flux/prod
╰─$ flux get helmrelease -n default
NAME    	REVISION	SUSPENDED	READY	MESSAGE                                               
keycloak	        	False    	False	HelmChart 'flux-system/default-keycloak' is not ready

# Keycloak.yml
apiVersion: source.toolkit.fluxcd.io/v1beta2
kind: HelmRepository
metadata:
  name: keycloak
  namespace: flux-system
spec:
  interval: 5m 
  url: oci://registry-1.docker.io/bitnamicharts/keycloak 
  type: oci

# keycloak-release.yml
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: keycloak
  namespace: default
spec:
  interval: 5m
  chart:
    spec:
      chart: keycloak # Name of the helm chart
      version: '17.0.0'
      sourceRef:
        kind: HelmRepository # <HelmRepository|GitRepository|Bucket> 
        name: keycloak
        namespace: flux-system
      interval: 1m
  values:
    replicaCount: 1         

I understand that flux download the package but for bitnami it seems that it's impossible because no public oci. Maybe I wrong.
before asking to bitnami, I prefer to ensure that not a flux side.

[hiddeco]

The URL of the HelmRepository should not include the chart name.

[Davidffry]

Ok thanks, I try this but same error :

apiVersion: source.toolkit.fluxcd.io/v1beta2
kind: HelmRepository
metadata:
  name: keycloak
  namespace: flux-system
spec:
  interval: 1m #defines at which interval the Helm repository index is fetched -  a push-based fetch can be introduced using webhook receivers < pour les releases perso plutôt utilisé cette partie.
  url: oci://registry-1.docker.io/bitnamicharts/
  type: oci
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: keycloak
  namespace: default
spec:
  interval: 1m
  chart:
    spec:
      chart: keycloak # Name of the helm chart
      version: '17.0.0'
      sourceRef:
        kind: HelmRepository # <HelmRepository|GitRepository|Bucket> 
        name: keycloak
        namespace: flux-system
      interval: 1m
  values:
    replicaCount: 1 

╭─david
╰─$ flux get helmreleases -n default                                                                                                                                                    130 ↵
NAME    	REVISION	SUSPENDED	READY	MESSAGE                                               
keycloak	        	False    	False	HelmChart 'flux-system/default-keycloak' is not ready	                                                                         /0,2s
╭─david
╰─$ flux get sources helm           
NAME    	REVISION	SUSPENDED	READY	MESSAGE                  
keycloak	        	False    	True 	Helm repository is ready

but I encounter this error also flux logs --all-namespaces -f : 2023-10-04T18:34:08.479Z error HelmChart/default-keycloak.flux-system - Reconciler error chart pull error: failed to download chart for remote reference: failed to get 'oci://registry-1.docker.io/bitnamicharts/keycloak:17.0.0': failed to do request: Head "https://registry-1.docker.io/v2/bitnamicharts/keycloak/manifests/17.0.0": dial tcp: lookup registry-1.docker.io on 10.43.0.10:53: read udp 10.42.1.6:42191->10.43.0.10:53: read: connection refused

https://artifacthub.io/packages/helm/bitnami/keycloak is the link.

[stefanprodan]

read udp 10.42.1.6:42191->10.43.0.10:53: read: connection refused

This is a DNS issue

[alokhomtk]

ok