Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

portainer/portainer-ee

Portainer.io

Portainer BE - a fully featured service delivery platform for containerized applications

Cilium DNS Proxy

Docker Hardened Image

Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.

oryd/oathkeeper

Ory Corp

A cloud native, security first firewall for your APIs. Integrates natively with ORY Hydra.

silverpeas

Docker Official Image

Silverpeas is a turnkey and open-source Collaborative and Social-Networking Portal.

nginx/nginx-prometheus-exporter

NGINX Inc.

NGINX Prometheus Exporter for NGINX and NGINX Plus

flyway/flyway

Redgate Software

Flyway - Database Migrations Made Easy https://github.com/flyway/flyway

atlassian/pipelines-docker-daemon

Atlassian

docker-in-docker for Bitbucket Pipelines

GitHub MCP Server

Docker Hardened Image

GitHub's official MCP Server connects AI tools directly to GitHub's platform. This gives AI agents, assistants, and chatbots the ability to read repositories and code files, manage issues and PRs, analyze code, and automate workflows.

Kubernetes Cloud Controller Manager (cloud-controller-manager)

Docker Hardened Image

Runs cloud-provider-specific control loops in the Kubernetes control plane. cloud-controller-manager embeds the cloud-specific control loops that integrate a Kubernetes cluster with the underlying cloud provider's APIs.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

hashicorp/consul-enterprise

HashiCorp, an IBM Company

Consul is a datacenter runtime that provides service discovery, configuration, and orchestration.

hashicorp/vault-k8s

HashiCorp, an IBM Company

First-class integrations between Vault and Kubernetes.

Handshake service for kernel TLS consumers

Jaeger Query

Docker Hardened Image

Jaeger Query is the Jaeger v2 distributed-tracing query service: it serves the Jaeger UI and the HTTP/gRPC query API for retrieving traces from a storage backend.

jetbrains/teamcity-server

JetBrains

TeamCity Server - Powerful Continuous Integration and Continuous Delivery out of the box

Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped

Rancher Fleet Controller