Charts

6 charts

Identity charts

Hardened Helm charts in the identity category. Each deploys our hardened image pinned by its signed digest, with production defaults.

0 CVE
authelia
Open-source authentication and authorization server providing single sign-on and two-factor authentication via a web portal, designed as a companion for reverse proxies. Packaged from Authelia's official prebuilt binary; needs a config plus a SQLite or PostgreSQL storage backend.
chart v0.0.11 · app v4.39.20
IdentitystandardApache-2.0
0 CVE
dex
Federated OpenID Connect (OIDC) identity provider. Acts as a portal to other identity providers (LDAP, SAML, GitHub, Google, OIDC) and issues OIDC tokens to apps and Kubernetes.
chart v0.0.9 · app v2.45.1
IdentitystandardApache-2.0
0 CVE
Keycloak
Open-source identity and access management server providing SSO, user federation, and OAuth2/OIDC and SAML for apps and APIs.
chart v0.0.14 · app v26.7.0
IdentitystandardApache-2.0
0 CVE
openfga
Fine-grained authorization engine (Zanzibar-style relationship-based access control) over HTTP and gRPC. From source on a hardened nonroot Wolfi base; datastore is the operator's choice.
chart v · app v1.18.1
IdentitystandardApache-2.0
0 CVE
openldap
OpenLDAP slapd, the reference open-source LDAP directory server, with the LMDB (back-mdb) backend and the client tools. Runs nonroot on unprivileged ports 1389/1636 and backs directory-driven auth for the identity stack.
chart v · app v2.6.13
IdentitystandardOLDAP-2.8
0 CVE
spicedb
Zanzibar-style authorization database for fine-grained permissions over gRPC. From source on a hardened nonroot Wolfi base; the operator supplies the datastore (in-memory, postgres, or cockroach).
chart v · app v1.56.0
IdentitystandardApache-2.0