Charts

299 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 299 charts.

A 1
mariadb-operator
MariaDB Operator, which runs MariaDB and Galera clusters on Kubernetes from CRDs: provisioning, replication and multi-primary HA, backups, users and…
chart v · app v26.10.1
Databases & enginesstandardMIT
A+
mastodon
Mastodon, the federated social network server (web and sidekiq). Built from the release tag on a hardened Wolfi ruby-4.0 runtime with every gem…
chart v · app v4.7.3
Apps & productivitystandardAGPL-3.0
A+
matomo
Matomo, the self-hosted web analytics platform and a privacy-respecting alternative to Google Analytics: you keep the raw data. Built from the…
chart v · app v5.12.0
Apps & productivitystandardGPL-3.0+
A 2
mattermost
Open-source, self-hosted team messaging and collaboration platform (a Slack alternative) with channels, direct messages, file sharing, and…
chart v · app v11.11.1
MessagingstandardAGPL-3.0
A 1
mediamtx
Real-time media server and proxy for RTSP, RTMP, HLS, WebRTC, and SRT. Single static Go binary on a hardened nonroot Wolfi base; config via a mounted…
chart v · app v1.21.2
Media & streamingstandardMIT
A+
mediawiki
MediaWiki, the wiki engine behind Wikipedia. The official release on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot, read-only rootfs), with…
chart v · app v1.46.2
Apps & productivitystandardGPL-2.0+
A+
Meilisearch
Fast, typo-tolerant full-text search engine with an instant-search API, easy to embed for site and in-app search with relevant results out of the box.
chart v · app v1.53.3
SearchstandardMIT
A+
Memcached
Simple, high-performance distributed in-memory cache for storing small objects and database query results to reduce backend load.
chart v · app v1.6.45
CachestandardBSD-3-Clause
0 CVE
mesh-stack
Istio ambient mesh in one install: istiod (control plane and certificate authority), the istio-cni node agent and ztunnel, wired for ambient so every…
chart v0.0.3 · app v1.30.5
StacksstandardUnknown
A+
metabase
Metabase open-source edition, self-service BI and dashboards over PostgreSQL, MySQL and many other databases. The official uberjar on Java 25, with…
chart v · app v0.63.19
Apps & productivitystandardAGPL-3.0
0 CVE
metallb
Hardened metallb image, built from source on Wolfi.
chart v0.0.4 · app v0.16.0
DatastorestandardUnknown
A 1
metrics-server
Kubernetes Metrics Server, the cluster-wide aggregator of resource usage that backs `kubectl top` and the Horizontal Pod Autoscaler. Scrapes kubelet…
chart v · app v0.9.0
ObservabilitystandardApache-2.0