Charts

281 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 281 charts.

A 1
OpenTelemetry Collector
OpenTelemetry Collector that receives, processes, and exports traces, metrics, and logs, a vendor-neutral pipeline for telemetry routing.
chart v · app v0.162.0
ObservabilitystandardApache-2.0
A+
opentelemetry-operator
The OpenTelemetry Operator, which manages OpenTelemetry Collectors (deployment, daemonset, statefulset or sidecar), the target allocator and…
chart v · app v0.159.0
ObservabilitystandardApache-2.0
D 2
ory-hydra
Ory Hydra, the OAuth 2.0 and OpenID Connect provider. Built from source like upstream's Linux release (cgo, sqlite, hsm, json1); one binary serves…
chart v · app v26.2.0
IdentitystandardApache-2.0
A 2
perses
CNCF dashboards and observability visualization tool with an embedded React UI and 24 default panel/datasource plugins. From source (Node UI build…
chart v · app v0.54.0
ObservabilitystandardApache-2.0
B 1
pgadmin
pgAdmin 4, the web administration and development UI for PostgreSQL (query tool, ERD, schema diff, backup and restore). The official wheel under…
chart v · app v9.18
RelationalstandardPostgreSQL
A+
pgbouncer
Lightweight connection pooler for PostgreSQL that fronts thousands of client connections with a small backend pool, cutting per-connection overhead.
chart v · app v1.25.2
RelationalstandardISC
A+
pgpool
PostgreSQL connection pooler, load balancer and query router. Pools client connections, spreads read-only queries across streaming-replication…
chart v · app v4.7.3
RelationalstandardHPND
A+
phpmyadmin
phpMyAdmin, the web console for MySQL and MariaDB. Built from the official release tarball on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot,…
chart v · app v5.2.3
Apps & productivitystandardGPL-2.0
A 2
pinniped
Pinniped, identity services for Kubernetes (the Concierge federates cluster login to an OIDC or LDAP provider, the Supervisor is an OIDC issuer…
chart v · app v0.47.0
IdentitystandardApache-2.0
0 CVE
pki-stack
Hardened internal PKI in one install: step-ca (your own certificate authority) + cert-manager (certificate lifecycle) + step-issuer (cert-manager…
chart v0.0.2 · app v1.0.0
StacksstandardUnknown
B 2
pocketbase
Open-source backend in a single file with an embedded SQLite database, auth, file storage, realtime subscriptions, and an admin dashboard over a REST…
chart v · app v0.40.4
Apps & productivitystandardMIT
A+
polaris
Fairwinds Polaris, the Kubernetes configuration validator. Audits running workloads or YAML files against best-practice checks (security contexts,…
chart v · app v10.2.5
Security & supply chainstandardApache-2.0