Charts

136 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 136 charts.

B 2
mattermost
Open-source, self-hosted team messaging and collaboration platform (a Slack alternative) with channels, direct messages, file sharing, and integrations. Packaged from Mattermost's official Team Edition server release; requires an external PostgreSQL.
chart v0.0.11 · app v11.9.0
MessagingstandardAGPL-3.0
B 1
mediamtx
Real-time media server and proxy for RTSP, RTMP, HLS, WebRTC, and SRT. Single static Go binary on a hardened nonroot Wolfi base; config via a mounted mediamtx.yml.
chart v · app v1.19.3
Media & streamingstandardMIT
A+
Meilisearch
Fast, typo-tolerant full-text search engine with an instant-search API, easy to embed for site and in-app search with relevant results out of the box.
chart v · app v1.51.0
SearchstandardMIT
A+
Memcached
Simple, high-performance distributed in-memory cache for storing small objects and database query results to reduce backend load.
chart v · app v1.6.45
CachestandardBSD-3-Clause
D 4
mimir
Horizontally scalable, highly available long-term storage for Prometheus metrics. Single static Go binary (all-in-one or microservices target) on a hardened nonroot Wolfi base; object storage is the operator's choice.
chart v · app v3.1.2
ObservabilitystandardAGPL-3.0
B 1
miniflux
Minimalist, opinionated RSS and Atom feed reader with a clean web UI and a REST API. Single pure-Go static binary on a hardened nonroot Wolfi base; needs PostgreSQL at runtime (operator-provided).
chart v · app v2.3.2
Apps & productivitystandardApache-2.0
A+
mlflow
MLflow Tracking Server for the ML lifecycle — experiment tracking, model registry, and run metadata over a REST/UI on port 5000. Packaged as the lightweight mlflow-skinny stack (gunicorn + psycopg2 + boto3) on a hardened Wolfi python base; needs an external PostgreSQL backend store and an artifact store (S3 or PVC).
chart v · app v3.14.0
Machine learning & AIstandardApache-2.0
C 1
MongoDB
Document (NoSQL) database for JSON-like data. SSPL is not OSI-approved / source-available, not open source; prefer the clean alternative FerretDB or DocumentDB.
chart v · app v8.0.26
DocumentstandardSSPL-1.0
A+
mosquitto
Lightweight Eclipse MQTT broker for IoT and pub/sub messaging. Speaks MQTT 3.1/3.1.1/5.0 over TCP, TLS, and websockets; built from source with OpenSSL and a hardened nonroot, read-only-rootfs runtime.
chart v · app v2.1.2
MessagingstandardEPL-2.0 OR BSD-3-Clause
A+
MySQL
Widely used open-source relational database for general-purpose OLTP workloads, with broad framework and tooling support.
chart v · app v9.7.2
RelationalcriticalGPL-2.0
C 1
n8n
Fair-code workflow automation platform — build integrations and automations across 400+ apps via a visual node editor, with native AI/LLM agent nodes. Node build on a hardened nonroot Wolfi base; the flagged transitive npm CVE class is cleared image-side with pinned overrides.
chart v · app v2.32.6
WorkflowstandardLicenseRef-n8n-Sustainable-Use-License-1.0
B 1
NATS
Lightweight, high-performance messaging system for cloud-native pub/sub and request-reply, with optional JetStream persistence and streaming.
chart v · app v2.14.3
MessagingstandardApache-2.0