CloudPirates Open Source Helm Charts
A curated collection of production-ready Helm charts for open-source cloud-native applications.
This repository provides secure, well-documented, and configurable Helm charts following cloud-native best practices.
⚠️ IMPORTANT: As of April 15, 2026, all changelogs only exist in the github release description. Old changelogs are kept for the sake of backwards compatiblity.
Available Charts
| Chart | Description | Version |
|---|
| ClusterPirate | Client agent for the CloudPirates Managed Observability Platform to connect your Kubernetes cluster to our infrastructure |  |
| Common | A library chart for common templates and helper functions |  |
| Etcd | A distributed reliable key-value store |  |
| Ghost | A simple, powerful publishing platform that allows you to share your stories with the world. |  |
| Keycloak | Open Source Identity and Access Management solution |  |
| MariaDB |
Quick Start
Prerequisites
- Kubernetes 1.24+
- Helm 3.2.0+
- PV provisioner support in the underlying infrastructure (if persistence is enabled)
Installing Charts
# From Docker Hub registry
helm install my-release oci://registry-1.docker.io/cloudpirates/<chartname>
# From GitHub Container Registry (GHCR)
helm install my-release oci://ghcr.io/cloudpirates-io/helm-charts/<chartname>
# From local clone
helm install my-release ./charts/<chart-name>
Chart Features
All charts in this repository provide:
Security First
- Cryptographically Signed: All charts are signed with Cosign for supply chain security
- Non-root containers by default
- Read-only root filesystems where possible
- Dropped Linux capabilities
- Security contexts configured
- No hardcoded credentials
Production Ready
- Comprehensive health checks (liveness, readiness, startup probes)
- Resource requests and limits support
- Persistent storage configurations
- Rolling update strategies
- Health check endpoints
Highly Configurable
- Extensive values.yaml with detailed documentation
- Support for existing secrets and ConfigMaps
- Flexible ingress configurations
- Service account customization
- Common labels and annotations support
Configuration
Each chart provides extensive configuration options through values.yaml. Key configuration areas include:
- Authentication & Security: User credentials, existing secrets, security contexts
- Storage: Persistent volumes, storage classes, backup configurations
- Networking: Services, ingress, network policies
- Scaling: Replica counts, autoscaling, resource limits
- Monitoring: Metrics, service monitors, health checks
Refer to individual chart READMEs for detailed configuration options.
Get Involved
Want to contribute? Awesome! The most basic way to show your support is to star the project, or to raise issues.
⚠️ IMPORTANT: As of January 22, 2026, all commits must be signed and verified. PRs with unsigned commits will not be merged.
If you want to open a PR, read our contributing guidelines for information about setting up your environment and instructions on the signature verification that we require.
Chat with us and the community on our Discord server!
Everyone is welcome, wether you have a question, need help with a chart, want to contribute, know what's coming next or just have a talk with us.

This project is built and maintained by our growing community of contributors!
Made with contrib.rocks.
Chart Issues
For issues specific to these Helm charts:
- Check individual chart README files for troubleshooting
- Review chart documentation and examples
- Verify configuration values
- Open an issue on GitHub