Skip to content
QuenchWorks

lgtm-stack

Chart · Stacks · standard · v0.0.19

digest pinnedcosign signedSPDX SBOMSLSA provenanceamd64 · arm64

Hardened, operator-free LGTM observability superset in one install: Loki (logs) + Grafana (the single pane) + Tempo (traces) + VictoriaMetrics (Prometheus-compatible metrics) + an OpenTelemetry Collector (OTLP ingest) + Alertmanager.

Version

0.0.19 · latest0.0.180.0.17

The latest line lives at the base page; older lines have their own page so you can pin and verify exactly that version. Only the most recent releases are listed — an older chart pins an older image digest.

Deployed image digest

sha256:98105c490bacac6d8bb2326356fb9dcec4f784ef7b89a2b8cb677664506fab72

Chart OCI version

oci://ghcr.io/quenchworks/charts/lgtm-stack:0.0.19

The chart pins its image by this signed digest, so you never track it yourself. Signatures, SBOM, and provenance attach to the same digest.

Signed
cosign keyless
SBOM
SPDX, on image
Provenance
SLSA build
Architectures
amd64, arm64
Runs as
nonroot (uid 1001)
Root filesystem
read-only

Install the chart

Deploy to Kubernetes with hardened defaults. The chart pins its image by signed digest, so you never track it yourself.

Install (latest)

helm install my-lgtm-stack oci://ghcr.io/quenchworks/charts/lgtm-stack --version 0.0.19

Deploys image (digest-pinned)

ghcr.io/quenchworks/images/victoriametrics@sha256:98105c490bacac6d8bb2326356fb9dcec4f784ef7b89a2b8cb677664506fab72
ghcr.io/quenchworks/images/loki@sha256:97bbf905a6c1923183abc2411e0028b9d33e15e163e27c4b15563102b84850ad
ghcr.io/quenchworks/images/grafana@sha256:3ccc56791c8a7ffc7a54a69084012900aa68bf3ef39a25095241e0867f416492
ghcr.io/quenchworks/images/tempo@sha256:9e889ec33f9673831aba70172dda907185247d2b56278965f40816f058b59a30
ghcr.io/quenchworks/images/alertmanager@sha256:7131b1e72afc8bb2a807248bebf4086e60c27b938e3bf72e5e137028d3bd521f
ghcr.io/quenchworks/images/otel-collector@sha256:827214c722b403d8384bb7eb8d5f447448afc8328afd4a5373761ad42c5d2261
ghcr.io/quenchworks/images/vector@sha256:29a90d5edfb6b1c9b4d713c7c7062e68c76a2fc446571cfe39b269117d96306c
ghcr.io/quenchworks/images/kube-state-metrics@sha256:71ce93d5367d75ccb99b074c0de3c7ded41ddae006eb3ec6c19a5b0a1e68c8ec
ghcr.io/quenchworks/images/node-exporter@sha256:112764454f62b608e73d23c7b1b75f84968cbab12b26fae52bf90a0ebea3520d

Charts used:

victoriametrics →loki →grafana →tempo →alertmanager →
Chart version
0.0.19
App version
1.0.0
Chart license
Apache-2.0
App license
Unknown
Signed
cosign (keyless)
Values schema
yes
Last published
2026-09-13

Verify the chart

cosign verify ghcr.io/quenchworks/charts/lgtm-stack:0.0.19 \
  --certificate-identity-regexp 'https://github.com/quenchworks/.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Transparency

The chart publishes its attestations on GitHub and the image it deploys carries its own on the same digest, publicly verifiable with the commands above. Both log to the Sigstore transparency log (Rekor), which cosign verify checks for you.

View on ArtifactHubChart source

Upstream project: