AWS EKS Pod Identity Agent

Docker Hardened Image

The AWS EKS Pod Identity Agent runs on Amazon EKS nodes and exchanges Kubernetes service account tokens for temporary AWS IAM credentials, providing pods with IAM roles without using IRSA or instance profiles.

Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

notary

Docker Official Image

DEPRECATED; Notary server and signer cooperatively handle signing and distribution

AWS Private CA Issuer

Docker Hardened Image

AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.

OpenBao

Docker Hardened Image

OpenBao provides a solution to manage, store, and distribute sensitive data, including secrets, certificates, and keys

Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

A container management platform built for organizations that deploy containers in production.

AWS SigV4 Proxy

Docker Hardened Image

This project signs and proxies HTTP requests with Sigv4

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

Certbot

Docker Hardened Image

EFF's ACME client for obtaining and renewing TLS certificates from Let's Encrypt and any ACME-compatible CA.

hashicorp/vault

HashiCorp, an IBM Company

Official vault docker images

Rancher Fleet Agent

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network

Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.

Connaisseur

Docker Hardened Image

A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.

Kyverno Reports Server

Docker Hardened Image

Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.

hashicorp/tfc-agent

HashiCorp, an IBM Company

Terraform Cloud Agent

amazon/aws-alb-ingress-controller

Amazon Web Services

AWS ALB Ingress Controller

Gatekeeper CRDs

Docker Hardened Image

Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.

hashicorp/consul-template

HashiCorp, an IBM Company

Consul Template is a template renderer, notifier, and supervisor for HashiCorp Consul and Vault.

Trust Manager Package

Docker Hardened Image

A trust manager package image that provides Debian CA certificates for use as an init container with cert-manager trust-manager.

spiped

Docker Official Image

Spiped is a utility for creating symmetrically encrypted and authenticated pipes between sockets.

Calico CTL

Docker Hardened Image

Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.

cimg/openjdk

CircleCI

The CircleCI OpenJDK (Java) Docker Convenience Image.

redislabs/redis

Redis

Clustered in-memory database engine compatible with open source Redis by Redis Labs

SPIFFE Helper

Docker Hardened Image

Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

portainer/portainer-ee

Portainer.io

Portainer BE - a fully featured service delivery platform for containerized applications

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.