Charts

312 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 312 charts.

D 6
kubo
Kubo, the reference IPFS node, for content-addressed storage and retrieval (RPC API, HTTP gateway, libp2p swarm over TCP and QUIC). Built from source…
chart v · app v0.43.1
Object storagestandardMIT OR Apache-2.0
A 6
kuma
CNCF service mesh control plane (Envoy-based) for multi-zone and multi-cluster meshes. Ships kuma-cp and kumactl with an embedded GUI, built from…
chart v · app v2.14.6
Coordination & meshstandardApache-2.0
A 2
kured
kured, the Kubernetes reboot daemon: it watches each node for a reboot-required sentinel and reboots nodes one at a time behind a lock, draining them…
chart v · app v1.23.0
CoordinationstandardApache-2.0
A+
kvrocks
Apache Kvrocks, a distributed key-value database on RocksDB that speaks the Redis protocol, keeping data on disk instead of in RAM. Built from source…
chart v · app v2.17.0
CachestandardApache-2.0
D 44
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
chart v · app v1.19.2
Security & supply chainstandardApache-2.0
D 4
label-studio
Label Studio, the open-source data labeling tool for text, images, audio, video and time series, with a web UI and a token-authenticated REST API.…
chart v · app v1.23.2
Machine learning & AIstandardApache-2.0
0 CVE
lakehouse-stack
Hardened open lakehouse: Trino queries Apache Iceberg tables cataloged by Nessie and stored in SeaweedFS over S3, wired together with generated S3…
chart v0.0.20 · app v1.0.0
StacksstandardUnknown
0 CVE
lgtm-stack
Hardened, operator-free LGTM observability superset in one install: Loki (logs) + Grafana (the single pane) + Tempo (traces) + VictoriaMetrics…
chart v0.0.43 · app v1.0.0
StacksstandardUnknown
0 CVE
linkerd
Hardened linkerd image, built from source on Wolfi.
chart v0.1.4 · app v26.8.4
DatastorestandardUnknown
C 6
linkerd-cni
Linkerd's CNI plugin (the alternative to the proxy-init init container), its installer and the Rust cni-repair-controller, built from source from the…
chart v · app v1.7.0
Coordination & meshstandardApache-2.0
0 CVE
linkerd-crds
Hardened linkerd-crds image, built from source on Wolfi.
chart v0.0.1 · app v26.8.4
DatastorestandardUnknown
0 CVE
linkerd-viz
Hardened linkerd-viz image, built from source on Wolfi.
chart v0.0.5 · app v26.8.4
DatastorestandardUnknown