Charts

166 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 166 charts.

C 5
adminer
vrana's single-file PHP database manager, a web UI for MySQL/MariaDB, PostgreSQL, and SQLite, served by a hardened PHP runtime.
chart v0.0.2 · app v6.0.1
Apps & productivitystandardApache-2.0
C 5
airflow
Apache Airflow, the programmatic workflow orchestration platform for authoring, scheduling, and monitoring DAGs. Built clean-room from source as a…
chart v0.1.12 · app v3.3.1
WorkflowstandardApache-2.0
A 2
Alertmanager
Companion to Prometheus that routes, groups, deduplicates, and silences alerts and dispatches them to email, Slack, PagerDuty, and more.
chart v0.0.13 · app v0.34.0
ObservabilitystandardApache-2.0
C 5
apisix
Cloud-native API gateway on OpenResty/LuaJIT with dynamic routing, auth, rate limiting, observability and a 100+ plugin ecosystem. Built from source…
chart v0.0.3 · app v3.18.0
GatewaystandardApache-2.0
D 3
apisix-ingress-controller
The Apache APISIX Ingress Controller, the Kubernetes operator that drives an APISIX data plane. Reconciles Gateway API resources, native Ingress and…
chart v0.0.1 · app v2.2.0
GatewaystandardApache-2.0
A 3
argo-workflows
Kubernetes-native workflow engine for orchestrating parallel jobs as DAGs. Ships the workflow-controller, the argo CLI/API server with an embedded…
chart v0.0.2 · app v3.7.18
WorkflowstandardApache-2.0
C 11
argocd
Argo CD, the CNCF declarative GitOps continuous-delivery controller for Kubernetes. One multi-call binary serves every component (server,…
chart v0.0.4 · app v3.4.6
GitOpsstandardApache-2.0
C 8
Atlantis
Terraform pull-request automation that runs plan on PRs and apply from PR comments, enforcing reviewed, Git-driven infrastructure changes with state…
chart v0.0.15 · app v0.46.0
GitOpsstandardApache-2.0
C 4
authelia
Open-source authentication and authorization server providing single sign-on and two-factor authentication via a web portal, designed as a companion…
chart v0.0.17 · app v4.39.20
IdentitystandardApache-2.0
C 12
authentik
Self-hosted identity provider (OIDC, SAML, LDAP, SCIM) with flows, policies, and application/provider management. Built clean-room from source on…
chart v0.1.15 · app v2026.5.6
Secrets & identitystandardMIT
A 1
blackbox-exporter
Prometheus exporter that probes endpoints externally over HTTP, HTTPS, TCP, DNS, and ICMP for black-box uptime and latency monitoring.
chart v0.0.1 · app v0.28.0
Metrics/ExporterstandardApache-2.0
C 5
Caddy
Web server and reverse proxy with fully automatic HTTPS via Let's Encrypt and a simple Caddyfile config.
chart v0.0.14 · app v2.11.4
GatewaystandardApache-2.0