Charts

281 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 281 charts.

A 1
InfluxDB
Time-series database purpose-built for ingesting and querying metrics, events, and IoT/sensor data at high write rates.
chart v · app v2.9.1
Time seriesstandardMIT
A+
ingress-nginx
The Kubernetes NGINX Ingress Controller. Routes external HTTP/HTTPS traffic to in-cluster Services via Ingress resources, with TLS termination,…
chart v · app v1.15.10
GatewaystandardApache-2.0
0 CVE
ingress-stack
Hardened ingress with TLS out of the box: ingress-nginx as the default IngressClass and cert-manager with a cluster CA issuer the stack creates, so…
chart v0.0.4 · app v1.0.0
StacksstandardUnknown
A 1
istiod
Istio's control plane binary (pilot-discovery) -- Pilot/xDS discovery, the sidecar-injecting webhook, and the mesh CA -- built from source on Wolfi.…
chart v · app v1.30.5
Coordination & meshstandardApache-2.0
A 1
jaeger
Distributed tracing platform (Jaeger v2, OpenTelemetry-collector based) with an embedded query UI. From source on a hardened nonroot Wolfi base;…
chart v · app v2.21.0
ObservabilitystandardApache-2.0
C 1
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
chart v · app v2.572
CI/CD & registrystandardMIT
A+
jetty
Eclipse Jetty, the lightweight Java web server and servlet container (Jakarta EE 10 on 12.0, EE 11 on 12.1), from the official jetty-home…
chart v · app v12.1.14
GatewaystandardEPL-2.0 OR Apache-2.0
A+
joomla
Joomla, the PHP content-management system. The official Full_Package release on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot, read-only…
chart v · app v6.1.4
Apps & productivitystandardGPL-2.0+
A+
jupyterhub
JupyterHub, the multi-user server that gives each user their own Jupyter notebook server, here as the hub with KubeSpawner (notebooks as pods) and…
chart v · app v6.0.1
Machine learning & AIstandardBSD-3-Clause
A 1
k6
Developer-friendly load and performance testing tool scripted in JavaScript. Single static Go binary on a hardened nonroot Wolfi base; test scripts…
chart v · app v2.3.0
ObservabilitystandardAGPL-3.0
A+
Kafka
Distributed event-streaming platform for high-throughput, durable, replayable publish-subscribe pipelines and stream processing.
chart v · app v4.3.1
MessagingcriticalApache-2.0
A 1
kafka-exporter
kafka_exporter, the Prometheus exporter for Kafka brokers, topics, partitions and consumer-group lag. Built from the release tag as one static…
chart v · app v1.10.0
ObservabilitystandardApache-2.0