Charts

281 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 281 charts.

0 CVE
observability-stack
Hardened, operator-free observability stack: Prometheus + Grafana + Alertmanager + kube-state-metrics + node-exporter + cAdvisor, wired together for…
chart v0.0.23 · app v2.20.0
StacksstandardUnknown
A+
odoo
Odoo Community Edition, the Python ERP and business apps suite (CRM, sales, inventory, accounting, website) backed by PostgreSQL. Built from the…
chart v · app v19.0.20260929
Apps & productivitystandardLGPL-3.0
A 1
ollama
Local LLM runtime that pulls, runs, and serves open models (Llama, Gemma, Qwen, DeepSeek, and more) behind a simple REST API. CPU-only image; the…
chart v · app v0.34.4
Machine learning & AIstandardMIT
A 1
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control,…
chart v · app v1.21.1
Security & supply chainstandardApache-2.0
A 1
opa-gatekeeper
OPA Gatekeeper, the Kubernetes admission controller for Rego policies (ConstraintTemplates and Constraints, validating and mutating webhooks, audit…
chart v · app v3.23.1
Security & supply chainstandardApache-2.0
A 1
OpenBao
Open-source secrets and encryption management for tokens, keys, and certificates, with dynamic secrets and leasing. The Linux Foundation MPL-2.0…
chart v · app v2.7.1
SecretsstandardMPL-2.0
A 1
opencost
Kubernetes cost monitoring and allocation (CNCF). Serves the cost-model API on 9003 as a single static Go binary on a hardened nonroot Wolfi base,…
chart v · app v1.121.3
ObservabilitystandardApache-2.0
A+
openfga
Fine-grained authorization engine (Zanzibar-style relationship-based access control) over HTTP and gRPC. From source on a hardened nonroot Wolfi…
chart v · app v1.21.0
IdentitystandardApache-2.0
A+
openldap
OpenLDAP slapd, the reference open-source LDAP directory server, with the LMDB (back-mdb) backend and the client tools. Runs nonroot on unprivileged…
chart v · app v2.6.14
IdentitystandardOLDAP-2.8
A+
openresty
OpenResty, nginx with LuaJIT and the lua-nginx-module set for scriptable proxies and web apps. Built from source on Wolfi against the system OpenSSL,…
chart v · app v1.31.1.1
GatewaystandardBSD-2-Clause
A+
OpenSearch
Search and analytics suite with a Kibana-style dashboards UI. The Apache-2.0 community fork of Elasticsearch and the recommended open alternative.
chart v · app v3.8.0
SearchstandardApache-2.0
D 2
opensearch-dashboards
The web UI for OpenSearch, for search, dashboards and visualizations. Ships without the security plugins, matching the opensearch image.
chart v · app v3.8.0
SearchstandardApache-2.0