Charts

312 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 312 charts.

D 10
ingress-nginx
The Kubernetes NGINX Ingress Controller. Routes external HTTP/HTTPS traffic to in-cluster Services via Ingress resources, with TLS termination,…
chart v · app v1.15.10
GatewaystandardApache-2.0
0 CVE
ingress-stack
Hardened ingress with TLS out of the box: ingress-nginx as the default IngressClass and cert-manager with a cluster CA issuer the stack creates, so…
chart v0.0.8 · app v1.0.0
StacksstandardUnknown
D 7
istio-cni
Istio's CNI node agent (upstream install-cni) with the istio-cni plugin, built from source from the same istio/istio tags as istiod, plus Wolfi…
chart v · app v1.30.7
Coordination & meshstandardApache-2.0
D 4
istiod
Istio's control plane binary (pilot-discovery) -- Pilot/xDS discovery, the sidecar-injecting webhook, and the mesh CA -- built from source on Wolfi.…
chart v · app v1.30.7
Coordination & meshstandardApache-2.0
A 3
jaeger
Distributed tracing platform (Jaeger v2, OpenTelemetry-collector based) with an embedded query UI. From source on a hardened nonroot Wolfi base;…
chart v · app v2.21.0
ObservabilitystandardApache-2.0
D 2
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
chart v · app v2.572
CI/CD & registrystandardMIT
A+
jetty
Eclipse Jetty, the lightweight Java web server and servlet container (Jakarta EE 10 on 12.0, EE 11 on 12.1), from the official jetty-home…
chart v · app v12.1.14
GatewaystandardEPL-2.0 OR Apache-2.0
A+
joomla
Joomla, the PHP content-management system. The official Full_Package release on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot, read-only…
chart v · app v6.1.4
Apps & productivitystandardGPL-2.0+
A+
jupyterhub
JupyterHub, the multi-user server that gives each user their own Jupyter notebook server, here as the hub with KubeSpawner (notebooks as pods) and…
chart v · app v6.1.1
Machine learning & AIstandardBSD-3-Clause
A 3
k6
Developer-friendly load and performance testing tool scripted in JavaScript. Single static Go binary on a hardened nonroot Wolfi base; test scripts…
chart v · app v2.3.0
ObservabilitystandardAGPL-3.0
A+
Kafka
Distributed event-streaming platform for high-throughput, durable, replayable publish-subscribe pipelines and stream processing.
chart v · app v4.3.2
MessagingcriticalApache-2.0
A 3
kafka-exporter
kafka_exporter, the Prometheus exporter for Kafka brokers, topics, partitions and consumer-group lag. Built from the release tag as one static…
chart v · app v1.10.0
ObservabilitystandardApache-2.0