Introducing Hardened Helm Charts for Minimus Images

By
Ashley Ward
August 21, 2025
Share this post

At Minimus, our focus has always been on providing minimal, secure, CIS-compliant container images. By removing unnecessary packages, we keep deployments lean and reduce the attack surface without sacrificing reliability. 

Now, we’re bringing that same approach to Helm charts, making it easy to deploy secure application stacks.

What Is a Helm Chart?

Helm charts are package managers for Kubernetes. Instead of writing and maintaining multiple YAML files to configure containers, services, and dependencies, a Helm chart bundles everything an application needs into a single, reusable package. 

Why Use Helm Charts?

With one command, you can install, upgrade, or manage complex applications across your cluster. This makes deploying Kubernetes workloads faster and more consistent. However, most publicly available Helm charts reference public images that contain unnecessary packages, resulting in a larger attack surface and increased risk.

Introducing Minimus Helm Charts

Until now, using Minimus images in a Helm-based deployment meant swapping out images in the chart yourself and making sure all the components worked well together. This added an extra step to every deployment and required additional testing to confirm compatibility.

We have now made that process much simpler. Minimus curates hardened Helm charts that are already configured to use our images. Each chart has been tested so the components work easily together out of the box.

Example: Using kube-prometheus-stack Helm Chart

Here is a look at kube-prometheus-stack Helm chart:

kube-prometheus-stack Helm chart overview showing included images and vulnerabilities
Overview of the kube-prometheus-stack Helm chart.

This stack provides a full monitoring solution with Grafana dashboards, Prometheus metrics, and alerting built in. It’s a substantial Helm chart which, as you can see from the above product screenshot, is made up of:

  • Grafana
  • K8s-sidecar
  • Kube-state-metrics
  • Prometheus
  • Prometheus-alertmanager
  • Prometheus-node-exporter

Thanks to this chart, you can deploy the entire stack knowing that they are all using the smallest and most secure container images available. You get the same security updates and regular maintenance you expect from Minimus, but now with a much faster path to deployment.

Minimus Helm Charts Overview

Of course, like all the rest of the product, we want to make sure that our Helm charts are as easy to use as possible. Each comes with full usage instructions:

kube-prometheus-stack Helm chart guide with prerequisites and installation steps using Minimus images
Helm chart instructions for kube-prometheus-stack, showing how to deploy with Minimus hardened images.

With Minimus Helm charts, you can also browse the Chart.yaml and values.yml right in the UI, or download and use them.

Helm chart values.yaml for kube-prometheus-stack showing Minimus registry configuration
Example values.yaml from the kube-prometheus-stack chart, pre-configured to pull images from the Minimus registry.

Try Minimus Helm Charts Today

With Minimus Helm charts, you can deploy only what you need, confident that you’re using images which have been built securely, configured compliantly, and have 97% fewer vulnerabilities than standard images. 

Full instructions for our Helm charts are available in our documentation, and we’d love your feedback as we expand the range of charts we offer. Get a demo to see how Minimus helps you avoid (not remediate) 97% of vulnerabilities.

Ashley Ward
Principal Solutions Architect

Try Minimus Today

Start using the latest version of any Minimus image for free - sign up now!