Skip to content
91 Charts · 86 Stable

Open-source Helm charts, forged to last.

The open-source alternative to Bitnami. Official upstream images, built-in S3 backups, sane security defaults, and day-two operations — Apache-2.0 licensed, free forever.

Get StartedBrowse Charts
Star on GitHubApache-2.0 LicensedGPG + Cosign Signed
helmforge — zsh

Install

From zero to production in three commands.

Add the repo, pick a chart, install. That's it.

1Add repo
2Update
3Install
zsh
user@k8s:~ $helm repo add helmforge https://repo.helmforge.dev
"helmforge" has been added to your repositories
user@k8s:~ $helm repo update
...Successfully got an update from the "helmforge" chart repository
user@k8s:~ $helm install my-release helmforge/redis
STATUS: deployed ✓
Full getting-started guide

Why HelmForge

Built for the day after deploy.

Every chart follows the same direction: predictable installs, clear values, and production-minded behavior from day one.

86 stable charts

Validated for real clusters

CI validates linting, templating, unit tests, Kubernetes schemas, Artifact Hub metadata, and security posture; runtime paths are checked on k3d when required.

# Release checks include:
helm lint --strict
helm unittest
kubeconform -strict
ah lint
kubescape scan
k3d deploy + verify
Non-root, hardened

Secure by default

Non-root containers, read-only filesystems, network policies, GPG provenance, and Cosign-signed OCI artifacts.

securityContext:
runAsNonRoot: true
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
39 charts with backup

Built-in S3 backups

Automated CronJob-based backups to any S3-compatible storage. Restore with a single command.

backup:
enabled: true
schedule: "0 2 * * *"
s3:
endpoint: s3.amazonaws.com
bucket: my-backups
Clean values.yaml

Simple to operate

Readable values, clear docs, and practical features like ingress, TLS, and observability.

ingress:
enabled: true
ingressClassName: traefik
hosts:
- host: app.example.com
No custom builds

Official upstream images

Every chart uses the official Docker image from the upstream project. No forks, no wrappers.

image:
repository: postgres # official
tag: "17.4"
pullPolicy: IfNotPresent
Free forever

Apache-2.0 Licensed

Use in production, modify, redistribute. No enterprise tiers, no usage limits, no surprises.

Support Open Source

Help keep HelmForge independent and moving.

Buy Me a Coffee QR code for HelmForge support

Scan to support on Buy Me a Coffee

Star HelmForge

HelmForge vs Bitnami — feature by feature.

Official upstream images, Apache-2.0 licensed, zero vendor lock-in. See exactly why teams switch from Bitnami to HelmForge.

Feature comparison between HelmForge, Bitnami, and generic community charts
FeaturesHelmForgeBitnamiGeneric Community
Container imagesOfficial upstream imagesCustom Bitnami-built imagesVaries
Image tagsPinned, immutable versionsBitnami-specific rolling tagsOften :latest or unpinned
LicenseApache-2.0 — CNCF-aligned open sourceApache 2.0 charts; images under EULAVaries
Pricing / Tiering100% Free foreverFree only for deprecated legacy images (requires Sales for production)Usually Free
Free imagesOfficial upstream, always updatedMoved to bitnamilegacy/* — no longer updatedVaries
Vendor lock-inNoneTied to Bitnami imagesLow
Built-in backupS3-compatible on 17+ chartsNot includedRarely included
Values designProduct-oriented (e.g. database.host)Kubernetes-centric abstractionsVaries
Database subchartsSelf-contained HelmForge subchartsSelf-contained (Bitnami)External dependencies
Security defaultsNon-root, tight security contextsNon-rootVaries wildly
Schema validationEvery chartSome chartsRare
Supply chain signingGPG provenance + Cosign on every artifactImage signaturesRare
CI pipelineLint + template + unittest + kubeconform + Artifact Hub lintInternal CIMinimal or none
Security scanningKubescape MITRE + NSA + SOC2 scan on chart changesInternal security processRare
Gateway APINative HTTPRoute support (opt-in per chart)Not availableRare
External SecretsBuilt-in ExternalSecret integration (ESO)Not availableManual setup
Dual-stack networkingIPv4/IPv6 ipFamilyPolicy supportPartialRare
Read the full comparison

Works with the tools you already use