Charts

297 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 297 charts.

D 2
hydra
Ory Hydra, an OAuth 2.0 and OpenID Connect provider. Issues and validates tokens for first- and third-party clients without owning user credentials…
chart v · app v26.2.0
IdentitystandardApache-2.0
0 CVE
identity-stack
Hardened, operator-free self-hosted SSO/identity stack: Keycloak (OIDC/SAML identity provider) + PostgreSQL (Keycloak's database) + oauth2-proxy (an…
chart v0.0.27 · app v1.0.0
StacksstandardUnknown
A 1
InfluxDB
Time-series database purpose-built for ingesting and querying metrics, events, and IoT/sensor data at high write rates.
chart v · app v2.9.1
Time seriesstandardMIT
A+
ingress-nginx
The Kubernetes NGINX Ingress Controller. Routes external HTTP/HTTPS traffic to in-cluster Services via Ingress resources, with TLS termination,…
chart v · app v1.15.10
GatewaystandardApache-2.0
0 CVE
ingress-stack
Hardened ingress with TLS out of the box: ingress-nginx as the default IngressClass and cert-manager with a cluster CA issuer the stack creates, so…
chart v0.0.6 · app v1.0.0
StacksstandardUnknown
A 2
istio-cni
Istio's CNI node agent (upstream install-cni) with the istio-cni plugin, built from source from the same istio/istio tags as istiod, plus Wolfi…
chart v · app v1.30.5
Coordination & meshstandardApache-2.0
A 1
istiod
Istio's control plane binary (pilot-discovery) -- Pilot/xDS discovery, the sidecar-injecting webhook, and the mesh CA -- built from source on Wolfi.…
chart v · app v1.30.5
Coordination & meshstandardApache-2.0
A 1
jaeger
Distributed tracing platform (Jaeger v2, OpenTelemetry-collector based) with an embedded query UI. From source on a hardened nonroot Wolfi base;…
chart v · app v2.21.0
ObservabilitystandardApache-2.0
C 1
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
chart v · app v2.572
CI/CD & registrystandardMIT
A+
jetty
Eclipse Jetty, the lightweight Java web server and servlet container (Jakarta EE 10 on 12.0, EE 11 on 12.1), from the official jetty-home…
chart v · app v12.1.14
GatewaystandardEPL-2.0 OR Apache-2.0
A+
joomla
Joomla, the PHP content-management system. The official Full_Package release on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot, read-only…
chart v · app v6.1.4
Apps & productivitystandardGPL-2.0+
A+
jupyterhub
JupyterHub, the multi-user server that gives each user their own Jupyter notebook server, here as the hub with KubeSpawner (notebooks as pods) and…
chart v · app v6.0.1
Machine learning & AIstandardBSD-3-Clause