Charts

280 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 280 charts.

A 1
descheduler
Kubernetes descheduler that evicts pods so the scheduler can re-place them for better cluster balance. Single static Go binary on a hardened nonroot…
chart v0.0.14 · app v0.36.0
CoordinationstandardApache-2.0
A 1
dex
Federated OpenID Connect (OIDC) identity provider. Acts as a portal to other identity providers (LDAP, SAML, GitHub, Google, OIDC) and issues OIDC…
chart v0.0.12 · app v2.45.1
IdentitystandardApache-2.0
A 1
distribution
The CNCF reference OCI and Docker registry server for storing and distributing container images and other OCI artifacts.
chart v0.0.16 · app v3.1.2
RegistrystandardApache-2.0
0 CVE
dns-stack
Self-hosted DNS for Kubernetes: PowerDNS Authoritative serves the zones and external-dns writes records into it from annotated Services and…
chart v0.0.3 · app v1.0.0
StacksstandardUnknown
A+
DocumentDB
Self-contained MongoDB-compatible server bundling PostgreSQL, the DocumentDB extension, and a wire gateway. Linux Foundation project, truly open…
chart v0.0.13 · app v0.114.0
DocumentstandardMIT
A+
Dragonfly
Multi-threaded, Redis- and Memcached-compatible in-memory datastore built to scale vertically on one node. BUSL is source-available, not open source;…
chart v0.0.20 · app v1.40.2
CachelowBUSL-1.1
A+
drupal
Drupal core, the open-source CMS and content framework. Built from the official release tarball on a hardened Wolfi php-8.4-fpm + nginx runtime…
chart v0.0.23 · app v11.4.8
Apps & productivitystandardGPL-2.0+
A 2
easegress
Easegress, the Go traffic orchestration gateway (HTTP/1-3 proxy, filters and pipelines, embedded etcd for clustering), with the egctl admin client.…
chart v0.0.4 · app v2.11.0
GatewaystandardApache-2.0
A+
Elasticsearch
Distributed search and analytics engine. Shipped under SSPL/Elastic License, which are not OSI-approved; OpenSearch (Apache-2.0) is the open drop-in…
chart v0.0.23 · app v9.5.5
SearchlowSSPL-1.0
C 1
emissary
Emissary-ingress, the CNCF Kubernetes API gateway built on Envoy (Mapping, Host and Listener CRDs, auth, rate limiting, canaries). Envoy 1.37 from…
chart v0.0.2 · app v4.1.0
GatewaystandardApache-2.0
A+
emqx
Massively scalable, distributed MQTT broker for IoT, IIoT, and connected vehicles. Speaks MQTT 5.0 over TCP/TLS/websockets with a clustering engine…
chart v0.0.10 · app v6.3.1
MessagingstandardBUSL-1.1
A+
envoy
Cloud-native L7 proxy and communication bus, the data plane behind API gateways and service meshes. HTTP/gRPC routing, load balancing, rich…
chart v0.0.7 · app v1.38.1
GatewaystandardApache-2.0