Charts

25 charts

Stacks charts

Hardened Helm charts in the stacks category. Each deploys our hardened image pinned by its signed digest, with production defaults.

0 CVE
backup-stack
Hardened Kubernetes backup: Velero with its AWS plugin, backing up to SeaweedFS over S3 in the same install, with generated keys, a bucket created at…
chart v0.0.8 · app v1.0.0
StacksstandardUnknown
0 CVE
cache-stack
Hardened cache stack with metrics: Valkey (Redis-compatible) with a redis_exporter sidecar, Prometheus discovering it in the release namespace, and…
chart v0.0.6 · app v1.0.0
StacksstandardUnknown
0 CVE
cnpg-stack
Operator-managed HA PostgreSQL in one install: the CloudNativePG operator + a replicated Cluster (streaming replication, automated failover, built-in…
chart v0.0.2 · app v1.30.1
StacksstandardUnknown
0 CVE
dns-stack
Self-hosted DNS for Kubernetes: PowerDNS Authoritative serves the zones and external-dns writes records into it from annotated Services and…
chart v0.0.3 · app v1.0.0
StacksstandardUnknown
0 CVE
gitops-stack
Hardened GitOps and delivery stack: Argo CD for GitOps sync, Argo Rollouts for canary and blue-green releases, Argo Workflows for pipelines, and Argo…
chart v0.0.9 · app v1.0.0
StacksstandardUnknown
0 CVE
identity-stack
Hardened, operator-free self-hosted SSO/identity stack: Keycloak (OIDC/SAML identity provider) + PostgreSQL (Keycloak's database) + oauth2-proxy (an…
chart v0.0.24 · app v1.0.0
StacksstandardUnknown
0 CVE
ingress-stack
Hardened ingress with TLS out of the box: ingress-nginx as the default IngressClass and cert-manager with a cluster CA issuer the stack creates, so…
chart v0.0.4 · app v1.0.0
StacksstandardUnknown
0 CVE
lakehouse-stack
Hardened open lakehouse: Trino queries Apache Iceberg tables cataloged by Nessie and stored in SeaweedFS over S3, wired together with generated S3…
chart v0.0.12 · app v1.0.0
StacksstandardUnknown
0 CVE
lgtm-stack
Hardened, operator-free LGTM observability superset in one install: Loki (logs) + Grafana (the single pane) + Tempo (traces) + VictoriaMetrics…
chart v0.0.30 · app v1.0.0
StacksstandardUnknown
0 CVE
llm-stack
Self-hosted LLM stack: Ollama runs the models, LiteLLM serves them through one OpenAI-compatible API with a generated key, and Qdrant stores…
chart v0.0.17 · app v1.0.0
StacksstandardUnknown
0 CVE
logging-stack
Hardened, operator-free logging stack: Loki + Grafana + Vector, wired together for cluster log aggregation and browsing.
chart v0.0.18 · app v0.58.0
StacksstandardUnknown
0 CVE
ml-stack
Hardened machine-learning stack: JupyterHub notebooks, the MLflow tracking server and model registry, and Label Studio for data labeling, wired…
chart v0.0.13 · app v1.0.0
StacksstandardUnknown