ci: publish showcase Helm chart to GitHub Pages via chart-releaser

Add a chart-releaser workflow that publishes index.yaml and packaged charts to gh-pages when Chart.yaml version bumps on main, alongside the existing GHCR OCI publish path.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: PatStLouis

.github/README.md

@@ -114,6 +114,40 @@ docker build -f frontend/Dockerfile \
 
 ---
 
+## Workflow: Publish showcase Helm chart (GHCR OCI)
+
+**File:** `.github/workflows/helm-publish-showcase.yaml`  
+**Name:** `Publish showcase Helm chart (GHCR OCI)`
+
+**Triggers:** Push to **`main`** when **`charts/showcase/**`** (or the workflow) changes; **`workflow_dispatch`**.
+
+Packages **`charts/showcase`** and pushes to **`oci://ghcr.io/bcgov/bc-wallet-showcase-chart`**. Does not require a chart version bump (overwrites the OCI tag for the packaged version).
+
+---
+
+## Workflow: Release showcase Helm chart (GitHub Pages)
+
+**File:** `.github/workflows/helm-release-showcase.yaml`  
+**Name:** `Release showcase Helm chart (GitHub Pages)`
+
+**Triggers:** Push to **`main`** when **`charts/showcase/**`** (or the workflow) changes; **`workflow_dispatch`**.
+
+Runs **chart-releaser** when **`charts/showcase/Chart.yaml`** **`version`** is new: creates a GitHub Release, packages the chart (with vendored dependencies), and updates **`index.yaml`** on the **`gh-pages`** branch.
+
+**Helm repo URL:** `https://bcgov.github.io/BC-Wallet-Demo`
+
+**One-time setup:** In the GitHub repository, enable **Pages** with source branch **`gh-pages`** / **`/ (root)`**.
+
+**Install:**
+
+```bash
+helm repo add bc-wallet-showcase https://bcgov.github.io/BC-Wallet-Demo
+helm repo update
+helm install my-showcase bc-wallet-showcase/showcase --version <chart-version>
+```
+
+---
+
 ## Related docs
 
 - Root [README.md](../README.md) — run and Docker overview for developers.

.github/workflows/helm-lint-showcase.yaml

@@ -10,6 +10,7 @@ on:
       - '.github/workflows/deploy-showcase-pr.yaml'
       - '.github/workflows/undeploy-showcase-pr.yaml'
       - '.github/workflows/helm-publish-showcase.yaml'
+      - '.github/workflows/helm-release-showcase.yaml'
       - '.github/actions/showcase-build-server/**'
       - '.github/actions/showcase-build-frontend/**'
       - '.github/actions/showcase-setup-oc-helm/**'
@@ -24,6 +25,7 @@ on:
       - '.github/workflows/deploy-showcase-pr.yaml'
       - '.github/workflows/undeploy-showcase-pr.yaml'
       - '.github/workflows/helm-publish-showcase.yaml'
+      - '.github/workflows/helm-release-showcase.yaml'
       - '.github/actions/showcase-build-server/**'
       - '.github/actions/showcase-build-frontend/**'
       - '.github/actions/showcase-setup-oc-helm/**'

.github/workflows/helm-release-showcase.yaml

@@ -0,0 +1,61 @@
+name: Release showcase Helm chart (GitHub Pages)
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+    paths:
+      - 'charts/showcase/**'
+      - '.github/workflows/helm-release-showcase.yaml'
+      - '.github/actions/showcase-helm-lint/**'
+
+permissions:
+  contents: write
+
+concurrency:
+  group: helm-release-showcase-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    name: chart-releaser → gh-pages
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          fetch-depth: 0
+
+      - uses: ./.github/actions/showcase-helm-lint
+        with:
+          skip_checkout: 'true'
+
+      - name: Configure Git
+        run: |
+          git config user.name "$GITHUB_ACTOR"
+          git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
+
+      - name: Run chart-releaser
+        uses: helm/chart-releaser-action@cae68fefc6b5f367a0275617c9f83181ba54714f # v1.7.0
+        with:
+          charts_dir: charts
+          skip_existing: true
+        env:
+          CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+
+      - name: Release summary
+        if: always()
+        run: |
+          {
+            echo "### Showcase chart (GitHub Pages)"
+            echo ""
+            echo "When \`charts/showcase/Chart.yaml\` **version** increases, chart-releaser publishes a GitHub Release and updates the **gh-pages** index."
+            echo ""
+            echo "**Helm repo:** \`https://bcgov.github.io/BC-Wallet-Demo\`"
+            echo ""
+            echo '```bash'
+            echo "helm repo add bc-wallet-showcase https://bcgov.github.io/BC-Wallet-Demo"
+            echo "helm repo update"
+            echo "helm search repo bc-wallet-showcase"
+            echo '```'
+          } >> "$GITHUB_STEP_SUMMARY"

charts/showcase/README.md

@@ -17,6 +17,34 @@ helm dependency update
 
 ## Install
 
+### From the GitHub Pages Helm repo (recommended)
+
+Published merges to **`main`** that bump **`charts/showcase/Chart.yaml`** **`version`** are released via **chart-releaser** to the **`gh-pages`** branch (see **`.github/workflows/helm-release-showcase.yaml`**). Enable **GitHub Pages** on the repository (**Settings → Pages → Deploy from branch `gh-pages` / root**) before the first release.
+
+```bash
+helm repo add bc-wallet-showcase https://bcgov.github.io/BC-Wallet-Demo
+helm repo update
+helm search repo bc-wallet-showcase
+
+helm upgrade --install my-showcase bc-wallet-showcase/showcase \
+  --version 0.4.0 \
+  -f deploy/showcase/values-dev.yaml \
+  --namespace <namespace> \
+  --create-namespace
+```
+
+### From GHCR (OCI)
+
+The same chart is also pushed to **`oci://ghcr.io/bcgov/bc-wallet-showcase-chart`** on **`main`** when chart files change (see **`.github/workflows/helm-publish-showcase.yaml`**).
+
+```bash
+helm upgrade --install my-showcase oci://ghcr.io/bcgov/bc-wallet-showcase-chart \
+  --version 0.4.0 \
+  -f deploy/showcase/values-dev.yaml \
+  --namespace <namespace> \
+  --create-namespace
+```
+
 ### OpenShift / BC Gov Silver (recommended overlay)
 
 Use **`deploy/showcase/values-dev.yaml`** for the shared **dev** overlay (ingress, route timeouts, optional auto-secrets, NetworkPolicy, public dev URL). Copy or override for other namespaces or hostnames.
@@ -122,6 +150,6 @@ Quick **public** checks (replace host with yours): **`curl -i`** to **`…/serve
 
 ## CI
 
-PRs touching **`charts/showcase/**`** or **`deploy/showcase/**`** run **`helm dependency update`**, **`helm lint`** (default values, **`deploy/showcase/values-dev.yaml`**, and **`deploy/showcase/values-pr.yaml`**), and **`helm template`** (see **`.github/workflows/helm-lint-showcase.yaml`**). Merges to **`main`** can run **`Deploy showcase (dev)`** when repository variables and a token secret are configured (see **`.github/workflows/deploy-showcase-dev.yaml`**).
+PRs touching **`charts/showcase/**`** or **`deploy/showcase/**`** run **`helm dependency update`**, **`helm lint`** (default values, **`deploy/showcase/values-dev.yaml`**, and **`deploy/showcase/values-pr.yaml`**), and **`helm template`** (see **`.github/workflows/helm-lint-showcase.yaml`**). Merges to **`main`** with a bumped chart **`version`** publish to **GitHub Pages** (**`.github/workflows/helm-release-showcase.yaml`**) and to **GHCR OCI** (**`.github/workflows/helm-publish-showcase.yaml`**). Merges to **`main`** can run **`Deploy showcase (dev)`** when repository variables and a token secret are configured (see **`.github/workflows/deploy-showcase-dev.yaml`**).
 
 **PR environments** (bcgov repo only): **`.github/workflows/deploy-showcase-pr.yaml`** builds and pushes **`ghcr.io/bcgov/bc-wallet-showcase-{server,frontend}:pr-<N>`**, then **`helm upgrade --install pr-<N>-showcase`** with **`deploy/showcase/values-pr.yaml`**. Public URL uses workflow default host suffix **`bc-wallet-showcase-dev.apps.silver.devops.gov.bc.ca`** (override with repository variable **`SHOWCASE_PR_HOST_SUFFIX`** if needed). Requires OpenShift secrets **`OPENSHIFT_SERVER`**, **`OPENSHIFT_TOKEN`**, **`OPENSHIFT_DEV_NAMESPACE`**. **`.github/workflows/undeploy-showcase-pr.yaml`** runs on PR close to **`helm uninstall`** and delete labeled **`Secret`**/**`PVC`**.