Charts

166 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 166 charts.

0 CVE
identity-stack
Hardened, operator-free self-hosted SSO/identity stack: Keycloak (OIDC/SAML identity provider) + PostgreSQL (Keycloak's database) + oauth2-proxy (an…
chart v0.0.13 · app v1.0.0
StacksstandardUnknown
C 6
InfluxDB
Time-series database purpose-built for ingesting and querying metrics, events, and IoT/sensor data at high write rates.
chart v0.0.13 · app v2.9.1
Time seriesstandardMIT
C 6
ingress-nginx
The Kubernetes NGINX Ingress Controller. Routes external HTTP/HTTPS traffic to in-cluster Services via Ingress resources, with TLS termination,…
chart v · app v1.15.10
GatewaystandardApache-2.0
D 4
istiod
Istio's control plane binary (pilot-discovery) -- Pilot/xDS discovery, the sidecar-injecting webhook, and the mesh CA -- built from source on Wolfi.…
chart v · app v1.30.4
Coordination & meshstandardApache-2.0
A 1
jaeger
Distributed tracing platform (Jaeger v2, OpenTelemetry-collector based) with an embedded query UI. From source on a hardened nonroot Wolfi base;…
chart v · app v2.20.0
ObservabilitystandardApache-2.0
C 6
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
chart v · app v2.572
CI/CD & registrystandardMIT
A 1
k6
Developer-friendly load and performance testing tool scripted in JavaScript. Single static Go binary on a hardened nonroot Wolfi base; test scripts…
chart v · app v2.2.0
ObservabilitystandardAGPL-3.0
C 5
Kafka
Distributed event-streaming platform for high-throughput, durable, replayable publish-subscribe pipelines and stream processing.
chart v · app v4.3.1
MessagingcriticalApache-2.0
A 2
keda
Kubernetes event-driven autoscaler that scales workloads based on external event sources (queues, streams, metrics). Ships the operator and metrics…
chart v · app v2.20.2
CoordinationstandardApache-2.0
F 7
Keycloak
Open-source identity and access management server providing SSO, user federation, and OAuth2/OIDC and SAML for apps and APIs.
chart v · app v26.7.2
IdentitystandardApache-2.0
D 9
kgateway
kgateway, the CNCF Gateway API control plane that succeeded Gloo Edge. Watches Gateway, HTTPRoute, GRPCRoute and its own gateway.kgateway.dev policy…
chart v · app v2.4.3
GatewaystandardApache-2.0
C 5
kong
API gateway and ingress controller on a patched OpenResty, with routing, auth, rate limiting, and a plugin ecosystem. Built from source against…
chart v · app v3.9.3
GatewaystandardApache-2.0