Charts

166 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 166 charts.

A+
envoy
Cloud-native L7 proxy and communication bus, the data plane behind API gateways and service meshes. HTTP/gRPC routing, load balancing, rich…
chart v0.0.5 · app v1.38.1
GatewaystandardApache-2.0
C 3
envoy-gateway
Gateway API control plane from the Envoy project. Watches Gateway, HTTPRoute and its own policy CRDs and programs Envoy over xDS, provisioning and…
chart v0.0.1 · app v1.9.0
GatewaystandardApache-2.0
C 6
etcd
Distributed, strongly consistent key-value store using Raft consensus. The backing store for Kubernetes and a building block for service coordination…
chart v0.0.17 · app v3.7.1
CoordinationcriticalApache-2.0
C 5
excalidraw
Open-source virtual whiteboard for sketching hand-drawn-style diagrams. Self-hostable as a static SPA served by hardened nginx, with no backend or…
chart v0.0.9 · app v0.18.1
Apps & productivitystandardMIT
A 1
external-dns
Synchronizes Kubernetes Services and Ingresses with DNS providers so records are managed automatically.
chart v0.0.1 · app v0.21.0
Coordination & meshstandardApache-2.0
A 1
external-secrets
External Secrets Operator, the CNCF operator that syncs secrets from external APIs (AWS/GCP/Azure Secrets Manager, Vault, and many more) into…
chart v0.0.11 · app v2.10.0
Security & supply chainstandardApache-2.0
A 1
FerretDB
MongoDB-compatible document database that translates the MongoDB wire protocol onto PostgreSQL via the DocumentDB extension. The clean-license…
chart v0.0.13 · app v2.7.0
DocumentstandardApache-2.0
B 2
filebrowser
Web-based file manager with a built-in UI, users, and share links. From source (Vite UI embedded in a static Go binary) on a hardened nonroot Wolfi…
chart v0.0.10 · app v2.63.23
Apps & productivitystandardApache-2.0
C 5
floci
Local AWS cloud emulator and LocalStack Community successor, built from source into a Quarkus fast-jar on a hardened Wolfi JRE. The hardened image…
chart v0.2.13 · app v1.6.0
Apps & productivitystandardMIT
C 5
Fluent Bit
Lightweight, fast log and metrics processor and forwarder for collecting, filtering, and shipping telemetry to many backends.
chart v0.0.12 · app v5.1.1
ObservabilitystandardApache-2.0
C 7
forgejo
Self-hosted lightweight Git forge (a community Gitea fork) with issues, PRs, CI, and packages. From source with the web UI embedded (no Node at…
chart v0.0.9 · app v15.0.3
GitstandardGPL-3.0+
C 4
Garage
Lightweight, S3-compatible object store for small, self-hosted, geo-distributed deployments that stays available across node failures. Licensed AGPL;…
chart v0.0.11 · app v2.3.0
Object storagestandardAGPL-3.0