Charts

9 charts

Gateway charts

Hardened Helm charts in the gateway category. Each deploys our hardened image pinned by its signed digest, with production defaults.

0 CVE
Caddy
Web server and reverse proxy with fully automatic HTTPS via Let's Encrypt and a simple Caddyfile config.
chart v0.0.12 · app v2.11.4
GatewaystandardApache-2.0
0 CVE
envoy
Cloud-native L7 proxy and communication bus, the data plane behind API gateways and service meshes. HTTP/gRPC routing, load balancing, rich observability, and an admin/health endpoint. The chart supplies the bootstrap config.
chart v0.0.4 · app v1.38.1
GatewaystandardApache-2.0
0 CVE
HAProxy
High-performance TCP and HTTP load balancer and reverse proxy known for reliability and fine-grained traffic control at scale.
chart v0.0.9 · app v3.4.0
GatewaystandardGPL-2.0+
0 CVE
httpd
Apache HTTP Server, the long-standing open-source web server and reverse proxy for serving static content and fronting application backends (mod_proxy).
chart v0.0.4 · app v2.4.68
GatewaycriticalApache-2.0
0 CVE
ingress-nginx
The Kubernetes NGINX Ingress Controller. Routes external HTTP/HTTPS traffic to in-cluster Services via Ingress resources, with TLS termination, path/host routing, and an admission webhook. The chart wires its RBAC, IngressClass, and webhook.
chart v0.0.7 · app v1.15.8
GatewaystandardApache-2.0
0 CVE
nginx
High-performance web server, reverse proxy, and load balancer for serving static content and fronting application backends.
chart v · app v1.30.4
GatewaycriticalBSD-2-Clause
0 CVE
tomcat
Apache Tomcat, the widely used open-source Java servlet container and web/application server for running Jakarta Servlet, JSP, and WebSocket web applications.
chart v · app v11.0.24
GatewaycriticalApache-2.0
0 CVE
Traefik
Cloud-native reverse proxy and load balancer with automatic service discovery, dynamic config, and built-in Let's Encrypt TLS.
chart v · app v3.7.9
GatewaystandardMIT
0 CVE
tyk
Full-featured API gateway with rate limiting, auth, and quotas. Single static Go binary on a hardened nonroot Wolfi base; Redis is a runtime dependency the operator provides.
chart v · app v5.13.1
GatewaystandardMPL-2.0