Charts

166 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 166 charts.

A 1
krakend
Stateless, declarative API gateway that aggregates and transforms backend responses from a single JSON config. Built from the community…
chart v · app v2.13.11
GatewaystandardApache-2.0
D 2
kratos
Ory Kratos, an identity and user-management server covering registration, login, MFA, account recovery and profile self-service. Headless by design…
chart v · app v26.2.0
IdentitystandardApache-2.0
A 1
kube-state-metrics
Exposes the state of Kubernetes objects as Prometheus metrics for dashboards and alerts.
chart v · app v2.20.0
ObservabilitystandardApache-2.0
A 2
kuma
CNCF service mesh control plane (Envoy-based) for multi-zone and multi-cluster meshes. Ships kuma-cp and kumactl with an embedded GUI, built from…
chart v · app v2.14.4
Coordination & meshstandardApache-2.0
A 6
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
chart v · app v1.19.1
Security & supply chainstandardApache-2.0
0 CVE
lgtm-stack
Hardened, operator-free LGTM observability superset in one install: Loki (logs) + Grafana (the single pane) + Tempo (traces) + VictoriaMetrics…
chart v0.0.19 · app v1.0.0
StacksstandardUnknown
0 CVE
linkerd
Hardened linkerd image, built from source on Wolfi.
chart v0.0.1 · app v26.8.4
DatastorestandardUnknown
A 1
livekit
WebRTC SFU server for scalable real-time audio, video, and data. Single static Go binary on a hardened nonroot Wolfi base; config via mounted YAML or…
chart v · app v1.13.6
Media & streamingstandardApache-2.0
0 CVE
logging-stack
Hardened, operator-free logging stack: Loki + Grafana + Vector, wired together for cluster log aggregation and browsing.
chart v0.0.12 · app v0.58.0
StacksstandardUnknown
C 6
Loki
Horizontally scalable log aggregation system from Grafana that indexes only labels, not full log text. Like Prometheus, but for logs. Licensed AGPL.
chart v · app v3.7.7
ObservabilitystandardAGPL-3.0
A 1
mailpit
Email and SMTP testing tool with a web UI for capturing and inspecting messages during development.
chart v · app v1.31.1
Apps & productivitystandardMIT
C 5
MariaDB
Community-developed relational database and drop-in MySQL successor, GPL-licensed and fully open. Default MySQL-compatible engine for the catalog.
chart v · app v12.3.2
RelationalcriticalGPL-2.0