AWS Private CA Issuer

Docker Hardened Image

AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.

Vertical Pod Autoscaler Admission Controller

Docker Hardened Image

Admission webhook controller for Kubernetes Vertical Pod Autoscaler that sets resource requests on new pods.

CSI External Health Monitor Controller

Docker Hardened Image

csi-external-health-monitor-controller is a Kubernetes CSI sidecar component that monitors the health of CSI volumes and reports anomalies to the Kubernetes API.

lightstreamer

Docker Official Image

Lightstreamer is a real-time messaging server optimized for the Internet.

grafana/alloy

Grafana Labs

Vendor-agnostic OpenTelemetry Collector distribution with programmable pipelines

cirros

Docker Official Image

CirrOS is a Tiny OS that specializes in running on a cloud.

ORAS

Docker Hardened Image

ORAS (OCI Registry As Storage) is a command-line tool for managing OCI artifacts in registries. It enables developers to push, pull, copy, and discover various content types beyond container images.

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

FleetConfig Controller

Docker Hardened Image

Kubernetes controller for managing Open Cluster Management FleetConfig hub and spoke resources.

Jenkins Inbound Agent

Docker Hardened Image

Jenkins Inbound Agent is a specialized Docker image for Kubernetes and containerized environments. It automatically connects to a Jenkins controller using environment variables, making it ideal for dynamic agent provisioning in Kubernetes clusters and CI/CD pipelines.

notary

Docker Official Image

DEPRECATED; Notary server and signer cooperatively handle signing and distribution

DataHub MCE Consumer

Docker Hardened Image

The DataHub MCE Consumer is a Kafka consumer service that processes MetadataChangeProposal events from upstream sources (ingestion CLI, actions framework) and applies them to DataHub's metadata storage layer via the GMS API, writing failures back to the FailedMetadataChangeProposal topic for retry.

Piraeus Operator

Docker Hardened Image

Kubernetes operator that manages LINSTOR clusters and automates deployment, scaling, and management of LINSTOR storage clusters in Kubernetes.

GitLab Runner Helper

Docker Hardened Image

GitLab Runner Helper handles git operations, artifact upload/download, and cache management for GitLab CI/CD jobs.

OpenBao

Docker Hardened Image

OpenBao provides a solution to manage, store, and distribute sensitive data, including secrets, certificates, and keys

Terraform

Docker Hardened Image

Terraform enables you to safely and predictably create, change, and improve infrastructure. It codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

geonetwork

Docker Official Image

GeoNetwork is a FOSS catalog for spatially referenced resources.

Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

Jsonnet

Docker Hardened Image

A configuration language for app and tool developers. A simple extension of JSON. Eliminate duplication with object-orientation.

Vertical Pod Autoscaler Updater

Docker Hardened Image

Monitors the VPA resources and compares current Pod resource requests with the recommendations, evicting and updating pod resources accordingly.

Percona XtraBackup

Docker Hardened Image

Percona XtraBackup is an open-source hot backup utility for MySQL that performs non-blocking backups for InnoDB, XtraDB, and MyISAM databases.

A container management platform built for organizations that deploy containers in production.

OpenTelemetry Go Autoinstrumentation

Docker Hardened Image

This is a Golang autoinstrumentation agent used by the OpenTelemetry Operator

Apache HTTP Server

Docker Hardened Image

The Apache HTTP Server (httpd) is a robust, extensible, and widely used web server for serving static and dynamic content. This Docker Hardened Image provides a minimal, non-root runtime of Apache HTTP Server suitable for production deployments.

OpenCost UI

Docker Hardened Image

Web-based UI for OpenCost Kubernetes cost monitoring

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

AWS SigV4 Proxy

Docker Hardened Image

This project signs and proxies HTTP requests with Sigv4

Open source framework for processing, monitoring, and alerting on time series data

Kafka Exporter

Docker Hardened Image

A Prometheus exporter for Kafka metrics