Charts

136 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 136 charts.

A+
Qdrant
Vector database and similarity-search engine for AI embeddings, powering semantic search, recommendations, and RAG with filtered nearest-neighbor queries.
chart v · app v1.18.3
VectorstandardApache-2.0
A+
questdb
High-performance time-series SQL database for fast ingestion and queries over metrics, financial ticks, and IoT data, with PostgreSQL-wire and InfluxDB line-protocol ingestion.
chart v · app v9.4.3
Time seriesstandardApache-2.0
A+
quickwit
Cloud-native search engine for logs, traces, and analytics with sub-second search over object storage. Built from Rust source (UI embedded, no Node at runtime) on a hardened nonroot Wolfi base; index data on object storage or a writable volume.
chart v · app v0.8.2
SearchstandardAGPL-3.0
A+
RabbitMQ
Reliable message broker speaking AMQP plus MQTT and STOMP, with flexible routing, queues, and acknowledgements for decoupling services.
chart v · app v4.3.4
MessagingcriticalMPL-2.0
A+
Redis
In-memory key-value store used as a cache, message broker, and ephemeral datastore. Shipped under AGPL (not permissive); Valkey is the BSD-licensed open alternative.
chart v · app v8.10.0
CachecriticalAGPL-3.0
B 1
rqlite
Lightweight, distributed relational database built on SQLite and Raft. Ships rqlited and the rqlite CLI as static (musl) Go binaries on a hardened nonroot Wolfi base; data dir is a writable volume.
chart v · app v10.2.5
RelationalstandardMIT
A+
RustFS
S3-compatible, high-performance object store written in Rust with a zero-master architecture, positioned as an Apache-2.0 MinIO alternative. Beta/preview.
chart v · app v1.0.0_beta12
Object storagelowApache-2.0
A+
ScyllaDB
High-throughput, low-latency wide-column store, API-compatible with Apache Cassandra and DynamoDB. This 6.x build is the final OSS line under AGPL.
chart v · app v2026.2.2
Wide-columnlowAGPL-3.0
B 1
sealed-secrets
Sealed Secrets, the controller that lets you commit encrypted secrets to Git safely. A cluster-side private key decrypts SealedSecret resources into ordinary Kubernetes Secrets, so the encrypted form is the only thing that ever leaves the cluster.
chart v · app v0.38.4
Security & supply chainstandardApache-2.0
B 1
SeaweedFS
Fast distributed storage for blobs, objects, and files (S3 API) built on Facebook's Haystack design, with O(1) disk seeks for billions of small files. Default object store after MinIO restricted its community edition.
chart v · app v4.40
Object storagestandardApache-2.0
0 CVE
skywalking
Hardened skywalking image, built from source on Wolfi.
chart v0.0.3 · app v10.4.0
DatastorestandardUnknown
D 1
Solr
Enterprise search platform built on Apache Lucene, offering full-text search, faceting, and indexing over large document collections.
chart v · app v10.0.0
SearchlowApache-2.0