Charts

297 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 297 charts.

A 1
ollama
Local LLM runtime that pulls, runs, and serves open models (Llama, Gemma, Qwen, DeepSeek, and more) behind a simple REST API. CPU-only image; the…
chart v · app v0.34.4
Machine learning & AIstandardMIT
A 1
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control,…
chart v · app v1.21.1
Security & supply chainstandardApache-2.0
A 1
opa-gatekeeper
OPA Gatekeeper, the Kubernetes admission controller for Rego policies (ConstraintTemplates and Constraints, validating and mutating webhooks, audit…
chart v · app v3.23.1
Security & supply chainstandardApache-2.0
A 1
OpenBao
Open-source secrets and encryption management for tokens, keys, and certificates, with dynamic secrets and leasing. The Linux Foundation MPL-2.0…
chart v · app v2.7.1
SecretsstandardMPL-2.0
A 1
opencost
Kubernetes cost monitoring and allocation (CNCF). Serves the cost-model API on 9003 as a single static Go binary on a hardened nonroot Wolfi base,…
chart v · app v1.121.3
ObservabilitystandardApache-2.0
A+
openfga
Fine-grained authorization engine (Zanzibar-style relationship-based access control) over HTTP and gRPC. From source on a hardened nonroot Wolfi…
chart v · app v1.21.0
IdentitystandardApache-2.0
A+
openldap
OpenLDAP slapd, the reference open-source LDAP directory server, with the LMDB (back-mdb) backend and the client tools. Runs nonroot on unprivileged…
chart v · app v2.6.14
IdentitystandardOLDAP-2.8
A+
openresty
OpenResty, nginx with LuaJIT and the lua-nginx-module set for scriptable proxies and web apps. Built from source on Wolfi against the system OpenSSL,…
chart v · app v1.31.1.1
GatewaystandardBSD-2-Clause
A+
OpenSearch
Search and analytics suite with a Kibana-style dashboards UI. The Apache-2.0 community fork of Elasticsearch and the recommended open alternative.
chart v · app v3.8.0
SearchstandardApache-2.0
F 5
opensearch-dashboards
The web UI for OpenSearch, for search, dashboards and visualizations. Ships without the security plugins, matching the opensearch image.
chart v · app v3.8.0
SearchstandardApache-2.0
A 1
OpenTelemetry Collector
OpenTelemetry Collector that receives, processes, and exports traces, metrics, and logs, a vendor-neutral pipeline for telemetry routing.
chart v · app v0.162.0
ObservabilitystandardApache-2.0
A+
opentelemetry-operator
The OpenTelemetry Operator, which manages OpenTelemetry Collectors (deployment, daemonset, statefulset or sidecar), the target allocator and…
chart v · app v0.159.0
ObservabilitystandardApache-2.0