Charts

2 charts

Secrets & identity charts

Hardened Helm charts in the secrets & identity category. Each deploys our hardened image pinned by its signed digest, with production defaults.

0 CVE
authentik
Self-hosted identity provider (OIDC, SAML, LDAP, SCIM) with flows, policies, and application/provider management. Built clean-room from source on Wolfi as a four-language image (nodejs web UI, Go server/proxy, Rust worker, Python/Django core via uv) on a hardened nonroot base; FIPS mode is not forced and the license-gated MaxMind GeoIP download is omitted. Needs PostgreSQL and Redis at runtime, provided by the chart.
chart v0.1.9 · app v2026.5.6
الأسرار والهويةstandardMIT
0 CVE
oauth2-proxy
Reverse-proxy authentication layer that secures upstream apps by delegating sign-in to OIDC and OAuth2 providers.
chart v · app v7.15.3
الأسرار والهويةstandardMIT