Charts

312 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 312 charts.

F 20
perses
CNCF dashboards and observability visualization tool with an embedded React UI and 24 default panel/datasource plugins. From source (Node UI build…
chart v · app v0.55.0
ObservabilitystandardApache-2.0
F 22
pgadmin
pgAdmin 4, the web administration and development UI for PostgreSQL (query tool, ERD, schema diff, backup and restore). The official wheel under…
chart v · app v9.18
RelationalstandardPostgreSQL
A+
pgbouncer
Lightweight connection pooler for PostgreSQL that fronts thousands of client connections with a small backend pool, cutting per-connection overhead.
chart v · app v1.25.2
RelationalstandardISC
A+
pgpool
PostgreSQL connection pooler, load balancer and query router. Pools client connections, spreads read-only queries across streaming-replication…
chart v · app v4.7.3
RelationalstandardHPND
D 5
phpmyadmin
phpMyAdmin, the web console for MySQL and MariaDB. Built from the official release tarball on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot,…
chart v · app v5.2.3
Apps & productivitystandardGPL-2.0
D 18
pinniped
Pinniped, identity services for Kubernetes (the Concierge federates cluster login to an OIDC or LDAP provider, the Supervisor is an OIDC issuer…
chart v · app v0.47.0
IdentitystandardApache-2.0
0 CVE
pki-stack
Hardened internal PKI in one install: step-ca (your own certificate authority) + cert-manager (certificate lifecycle) + step-issuer (cert-manager…
chart v0.0.7 · app v1.0.0
StacksstandardUnknown
D 9
plone
Plone, the enterprise CMS on Zope; this is the Plone 6 backend (Products.CMFPlone with the plone.restapi REST API) that a Volto frontend talks to.…
chart v · app v6.2.2
Apps & productivitystandardGPL-2.0
B 4
pocketbase
Open-source backend in a single file with an embedded SQLite database, auth, file storage, realtime subscriptions, and an admin dashboard over a REST…
chart v · app v0.40.5
Apps & productivitystandardMIT
A 2
polaris
Fairwinds Polaris, the Kubernetes configuration validator. Audits running workloads or YAML files against best-practice checks (security contexts,…
chart v · app v10.2.5
Security & supply chainstandardApache-2.0
D 6
policy-reporter
Policy Reporter, Kyverno's PolicyReport aggregator. Watches PolicyReport results from Kyverno and other engines, serves them over a REST API and…
chart v · app v3.10.0
Security & supply chainstandardMIT
0 CVE
policy-stack
Hardened Kubernetes policy in one install: Kyverno (admission policies and background scans that write PolicyReports) + Policy Reporter (those…
chart v0.0.12 · app v1.0.0
StacksstandardUnknown