Rook Ceph

Docker Hardened Image

Rook Ceph is the Kubernetes operator and helper image for deploying and managing Ceph clusters.

OpenTelemetry Collector

Docker Hardened Image

OpenTelemetry Collector is a vendor-agnostic telemetry pipeline that receives, processes, and exports traces, metrics and logs. It is used as a standalone gateway or as an agent to centralize telemetry collection and forward data to backends such as Prometheus, Tempo, Jaeger, or commercial APMs.

Caddy

Docker Hardened Image

Fast, multi-purpose web server with automatic HTTPS

cert-manager-startupapicheck

Docker Hardened Image

A small cert-manager CLI utility that verifies the cert-manager API and components have started correctly. Primarily used as a Kubernetes Job during installation or upgrades to validate cert-manager readiness.

Clojure

Docker Hardened Image

Clojure is a dynamic, general-purpose programming language that runs on the JVM, combining functional programming with robust concurrency support.

CloudNativePG

Docker Hardened Image

CloudNativePG is a Kubernetes operator that covers the full lifecycle of a PostgreSQL database cluster with a primary/standby architecture, using native streaming replication.

Crossplane

Docker Hardened Image

Crossplane is an open source Kubernetes add-on that enables platform teams to assemble infrastructure from multiple vendors.

Cilium Operator Generic

Docker Hardened Image

Cluster-wide operator managing Cilium networking and security policies

Cert-manager-webhook

Docker Hardened Image

A minimal Cert Manager webhook image

Argo CLI

Docker Hardened Image

Argo CLI is a tool to run argo workflow specs

cert-manager-cainjector

Docker Hardened Image

CA injector component cert-manager image

Fluentd Kubernetes Daemonset

Docker Hardened Image

Fluentd DaemonSet for collecting, enriching, and shipping Kubernetes node and container logs.

Tigera Operator

Docker Hardened Image

Kubernetes operator for managing Calico and Calico Enterprise installations.

Helm

Docker Hardened Image

Helm is the package manager for Kubernetes that helps you manage Kubernetes applications.

Prometheus Config Reloader

Docker Hardened Image

Prometheus Config Reloader for use with Prometheus Operator.

Grafana Alloy

Docker Hardened Image

Vendor-agnostic OpenTelemetry Collector distribution with programmable pipelines

KEDA

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

Harbor Trivy Adapter

Docker Hardened Image

Harbor scanner adapter that wraps the Trivy vulnerability scanner to provide a REST API for scanning container images.

MySQL

Docker Hardened Image

MySQL is a widely used, open-source relational database management system (RDBMS).

Bun

Docker Hardened Image

Bun is a fast, modern JavaScript runtime.

Virt Launcher

Docker Hardened Image

Virt Launcher provides the runtime environment for virtual machines in KubeVirt

Kubernetes Cluster Autoscaler

Docker Hardened Image

Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster.

Istio Ztunnel

Docker Hardened Image

The ztunnel component of Istio's ambient mesh

Istio Proxy v2

Docker Hardened Image

Istio proxy (Envoy with Istio extensions) - high-performance service mesh sidecar proxy

Istio Install CNI

Docker Hardened Image

Istio CNI installer image and daemonset for Kubernetes environments

KEDA Metrics API Server

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

Kyverno

Docker Hardened Image

Kyverno is a Kubernetes-native policy engine for validating, mutating, and generating Kubernetes resources using YAML policies.

Cilium Operator

Docker Hardened Image

Operator managing Cilium networking and security policies

Prometheus Alertmanager

Docker Hardened Image

Alertmanager deduplicates, groups, and routes alerts from Prometheus to notification receivers and supports silences, inhibition and HA clustering.

RabbitMQ

Docker Hardened Image

RabbitMQ is an open source multi-protocol messaging broker.