Kustomize Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Kustomize-based manifests declared as Kustomization resources in Kubernetes, enabling GitOps-driven continuous delivery.

Notification Controller

Docker Hardened Image

Flux CD component that dispatches events to external notification providers and exposes a webhook receiver endpoint for triggering reconciliation from external systems.

Metrics Server

Docker Hardened Image

Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines. It collects resource metrics from Kubelets and exposes them in Kubernetes apiserver through Metrics API for use by Horizontal Pod Autoscaler and Vertical Pod Autoscaler.

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

pypy

Docker Official Image

PyPy is a fast, compliant alternative implementation of the Python language.

Istio Pilot

Docker Hardened Image

Istio control plane component that configures proxies and handles service discovery

clojure

Docker Official Image

Clojure is a dialect of Lisp that runs on the JVM.

Cilium Envoy

Docker Hardened Image

Envoy proxy for Cilium with minimal Envoy extensions and Cilium policy enforcement filters.

arangodb

Docker Official Image

ArangoDB - a scalable graph database system to drive value from connected data, faster.

Grafana Tempo

Docker Hardened Image

Grafana Tempo is an open source, easy-to-use, and high-scale distributed tracing backend.

Grafana Image Renderer

Docker Hardened Image

Headless browser service for rendering Grafana panels and dashboards as PNG images and PDF documents using Chromium.

Virt Operator

Docker Hardened Image

Virt Operator deploys and manages the KubeVirt virtualization infrastructure in Kubernetes

Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

Virt Controller

Docker Hardened Image

Virt Controller manages the lifecycle of virtual machines in KubeVirt

Virt Export Server

Docker Hardened Image

Virt Export Server serves virtual machine volume exports in KubeVirt

portainer/portainer

Portainer.io

This Repo is now deprecated, use portainer/portainer-ce instead.

Reloader

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

Cassandra

Docker Hardened Image

Open source NoSQL distributed database.

SapMachine

Docker Hardened Image

SapMachine is SAP's downstream distribution of OpenJDK providing production-ready JDK and JRE builds. This image packages the SapMachine JDK for use in containers with JAVA_HOME set to /opt/java/openjdk and common Java CLI tools available on PATH.

kube-state-metrics

Docker Hardened Image

an add-on agent to generate and expose cluster-level metrics

MediaWiki

Docker Hardened Image

Free and open-source wiki software (the software behind Wikipedia).

Kubeflow Pipelines - Frontend

Docker Hardened Image

The Kubeflow Pipelines provides the UI of the Kubeflow Pipeline ecosystem.

Ceph CSI

Docker Hardened Image

Container Storage Interface driver for Ceph-backed RBD, CephFS, NFS, and NVMe-oF workloads on Kubernetes.

Kube Webhook Certgen

Docker Hardened Image

Certificate generator and patcher for Kubernetes admission webhooks.

Virt Export Proxy

Docker Hardened Image

Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt

percona/percona-xtradb-cluster-operator

Percona

Percona XtraDB Cluster Operator

Argo Events

Docker Hardened Image

Argo Events is an event-driven Workflow Automation Framework

OAuth2 Proxy

Docker Hardened Image

A reverse proxy that provides authentication using OAuth2 and OIDC providers.

Contour

Docker Hardened Image

Contour is a Kubernetes ingress controller using Envoy proxy to provide dynamic configuration updates and high performance load balancing. It supports Ingress, HTTPProxy, and Gateway API.