Charts

280 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 280 charts.

A 1
envoy-gateway
Gateway API control plane from the Envoy project. Watches Gateway, HTTPRoute and its own policy CRDs and programs Envoy over xDS, provisioning and…
chart v0.0.7 · app v1.9.2
GatewaystandardApache-2.0
A 2
etcd
Distributed, strongly consistent key-value store using Raft consensus. The backing store for Kubernetes and a building block for service coordination…
chart v0.0.21 · app v3.7.2
CoordinationcriticalApache-2.0
A+
excalidraw
Open-source virtual whiteboard for sketching hand-drawn-style diagrams. Self-hostable as a static SPA served by hardened nginx, with no backend or…
chart v · app v0.18.1
Apps & productivitystandardMIT
A 1
external-dns
Synchronizes Kubernetes Services and Ingresses with DNS providers so records are managed automatically.
chart v · app v0.23.0
Coordination & meshstandardApache-2.0
A 1
external-secrets
External Secrets Operator, the CNCF operator that syncs secrets from external APIs (AWS/GCP/Azure Secrets Manager, Vault, and many more) into…
chart v · app v2.11.0
Security & supply chainstandardApache-2.0
A 1
FerretDB
MongoDB-compatible document database that translates the MongoDB wire protocol onto PostgreSQL via the DocumentDB extension. The clean-license…
chart v · app v2.7.0
DocumentstandardApache-2.0
B 2
filebrowser
Web-based file manager with a built-in UI, users, and share links. From source (Vite UI embedded in a static Go binary) on a hardened nonroot Wolfi…
chart v · app v2.63.23
Apps & productivitystandardApache-2.0
A+
flink
Apache Flink, the stateful stream and batch processing engine. Upstream's official binary distribution on a hardened nonroot Wolfi JRE 21, with the…
chart v · app v2.3.0
WorkflowstandardApache-2.0
A+
floci
Local AWS cloud emulator and LocalStack Community successor, built from source into a Quarkus fast-jar on a hardened Wolfi JRE. The hardened image…
chart v · app v2.1.0
Apps & productivitystandardMIT
A+
Fluent Bit
Lightweight, fast log and metrics processor and forwarder for collecting, filtering, and shipping telemetry to many backends.
chart v · app v5.1.3
ObservabilitystandardApache-2.0
A+
fluentd
Fluentd, the CNCF unified logging layer that collects, parses, buffers and routes logs (forward, HTTP and tail inputs; stdout and file outputs built…
chart v · app v1.19.4
ObservabilitystandardApache-2.0
0 CVE
flux
Hardened flux image, built from source on Wolfi.
chart v0.0.4 · app v2.9.5
DatastorestandardUnknown