kube-prometheus-stack

Chart

Apps

Dev

Infra

Utils

Updated yesterday

Versions

Browse all available versions of the Helm chart.

Updated

App version

Chart version

Images Included

Vulnerabilities

yesterday

v0.90.183.4.0

grafana 12.4.2

k8s-sidecar 2.6.0

kube-state-metrics 2.18.0

kube-webhook-certgen 1.15.1

prometheus 3.11.1

prometheus-alertmanager 0.31.1

prometheus-config-reloader 0.90.1

prometheus-node-exporter 1.11.1

prometheus-operator 0.90.1

5495125122

kube-prometheus-stack 83.4.0
Chart
Apps
Dev
Infra
Utils

Updated yesterday

App Versionv0.90.1

Chart Version83.4.0

Vulnerabilities

5495125122

Images included

grafana 12.4.2

k8s-sidecar 2.6.0

kube-state-metrics 2.18.0

kube-webhook-certgen 1.15.1

prometheus 3.11.1

prometheus-alertmanager 0.31.1

prometheus-config-reloader 0.90.1

prometheus-node-exporter 1.11.1

prometheus-operator 0.90.1

Chart Signature

Verify this Helm chart using Cosign to confirm it was published by Minimus and was not modified post-publication. Cosign by Sigstore is the recommended open source toolset for supply-chain security.

Get Cosign

You can use the Cosign image offered by Minimus or install the following locally:

Cosign-a command line utility used to sign software artifacts and verify and download image signatures and attestations.
jq-a JSON processor used to format the signatures and attestations.

Verify Chart Signature

Run the Cosign command to verify the Helm chart signature and confirm its integrity.

Verify this chart version

cosign verify "helm.mini.dev/kube-prometheus-stack@sha256:64ef641904405124ca956d59a3daad2c8bc9d6ad19f4d5adfcdaf56e1cfafde6" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  --certificate-identity-regexp "https://github.com/minimusio/helm-charts/.github/workflows/.*\\.ya?ml@refs/.*"

Minimus uses Cosign keyless signing with Sigstore and GitHub Actions OIDC.

Expected output

Verification for helm.mini.dev/kube-prometheus-stack@sha256:64ef641904405124ca956d59a3daad2c8bc9d6ad19f4d5adfcdaf56e1cfafde6 --
The following checks were performed on each of these signatures:
- The cosign claims were validated
- Existence of the claims in the transparency log was verified offline
- The code-signing certificate was verified using trusted certificate authority certificates
[ { ...signature claims JSON... } ]

This page is available on desktop