Charts

166 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 166 charts.

C 5
timescaledb
PostgreSQL 17 plus the open TimescaleDB extension (Apache-only edition), adding hypertables, continuous aggregates, and time-series functions for…
chart v · app v2.29.2
Time seriesstandardApache-2.0
C 5
tomcat
Apache Tomcat, the widely used open-source Java servlet container and web/application server for running Jakarta Servlet, JSP, and WebSocket web…
chart v · app v11.0.25
GatewaycriticalApache-2.0
0 CVE
tracing-stack
Hardened, operator-free distributed tracing stack: Tempo (trace store/query) + Grafana (Tempo datasource + trace exploration) + an OpenTelemetry…
chart v0.0.9 · app v1.0.0
StacksstandardUnknown
A 1
Traefik
Cloud-native reverse proxy and load balancer with automatic service discovery, dynamic config, and built-in Let's Encrypt TLS.
chart v · app v3.7.13
GatewaystandardMIT
A 1
tyk
Full-featured API gateway with rate limiting, auth, and quotas. Single static Go binary on a hardened nonroot Wolfi base; Redis is a runtime…
chart v · app v5.14.0
GatewaystandardMPL-2.0
C 4
typesense
Fast, typo-tolerant search engine with an instant-search REST API and a self-contained embedded store (no external database), tuned for low-latency…
chart v · app v30.2
SearchstandardGPL-3.0
A+
Valkey
BSD-licensed in-memory key-value store, the truly-open community fork of Redis 7.2. QuenchWorks' default cache and the recommended Redis drop-in…
chart v · app v9.1.2
CachecriticalBSD-3-Clause
C 6
varnish
HTTP reverse-proxy cache (web accelerator) that fronts an origin and serves its responses from memory, cutting backend load and tail latency. Caching…
chart v · app v9.0.3
CachestandardBSD-2-Clause
A 1
vault
Secrets and encryption management for tokens, keys, and certificates, with dynamic secrets, leasing, and PKI. Shipped under the Business Source…
chart v · app v2.0.4
SecretslowBUSL-1.1
A+
Vector
High-performance observability pipeline that collects, transforms, and routes logs, metrics, and traces between sources and sinks.
chart v · app v0.58.0
ObservabilitystandardMPL-2.0
A 1
velero
CNCF backup and disaster-recovery tool for Kubernetes cluster resources and persistent volumes. Single static Go binary on a hardened nonroot Wolfi…
chart v · app v1.18.2
Storage & platformstandardApache-2.0
A+
victorialogs
Fast, cost-efficient logs database with the LogsQL query language. Single static Go binary on a hardened nonroot Wolfi base; log data lives on a…
chart v · app v1.52.0
ObservabilitystandardApache-2.0