Cilium startup script

Docker Hardened Image

Cilium startup script

APISIX Ingress Controller Helm chart

Docker Hardened Image

The APISIX Ingress Controller Helm chart is an open source project for running the APISIX Gateway as a Kubernetes Ingress.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

NGINX Ingress Controller Helm chart

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

Cilium DNS Proxy

Docker Hardened Image

Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.

Handshake service for kernel TLS consumers

Calico Typha

Docker Hardened Image

Calico fan-out proxy that scales access to the Calico datastore for large clusters.

Calico Goldmane

Docker Hardened Image

Calico flow aggregation service for network flow telemetry.

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Istio CNI Helm chart

Docker Hardened Image

Helm chart for deploying the Istio CNI plugin.

Calico Whisker Backend

Docker Hardened Image

Backend API service for the Calico Whisker network flow visualization UI.

Tailscale Operator Helm chart

Docker Hardened Image

Helm chart for the Tailscale Kubernetes Operator, which manages Tailscale resources including ingress, egress, subnet routers, and proxies within a cluster.

Calico CSI

Docker Hardened Image

Calico CSI driver for secure connections from Kubernetes pods to local daemons.

Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

Calico Pod2Daemon FlexVol

Docker Hardened Image

Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.

wait-for-it

Docker Hardened Image

A pure bash script to test and wait on the availability of a TCP host and port. Useful for synchronizing the spin-up of interdependent services in Docker Compose.

Tailscale Kubernetes Operator

Docker Hardened Image

Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

Calico Node Driver Registrar

Docker Hardened Image

CSI node driver registrar repackaged by Calico to register the Calico CSI driver with the kubelet.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Calico Webhooks

Docker Hardened Image

Validating admission webhook server for Calico tiered RBAC enforcement on policy resources.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

NetBox

Docker Hardened Image

NetBox is the open-source network infrastructure source of truth — IPAM and DCIM in one Django application.

Kubernetes Ingress Default Backend

Docker Hardened Image

A minimal Kubernetes default backend server for unmatched ingress requests.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

Cilium Hubble Export to Stdout

Docker Hardened Image

Streams Hubble network flow export logs to stdout for log collection

httpbin

Docker Hardened Image

A simple HTTP request and response service for testing HTTP clients, libraries, and proxies.