Calico CTL

Docker Hardened Image

Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.

Source Watcher

Docker Hardened Image

Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.

Grafana k6-operator Helm chart

Docker Hardened Image

Helm chart for the Grafana k6 Kubernetes operator

Hatchet Lite

Docker Hardened Image

An orchestration engine for background tasks, AI agents, and durable workflows

Istio Gateway Helm chart

Docker Hardened Image

Helm chart for deploying the Istio Gateway.

Elastic Cloud on Kubernetes (ECK) Operator

Docker Hardened Image

Kubernetes operator for managing Elasticsearch, Kibana, APM Server, and other Elastic Stack applications

Cilium startup script

Docker Hardened Image

Cilium startup script

Grafana Agent Operator Helm chart

Docker Hardened Image

A Kubernetes operator that simplifies deploying and managing Grafana Agent instances for collecting metrics, logs, and traces.

APISIX Ingress Controller Helm chart

Docker Hardened Image

The APISIX Ingress Controller Helm chart is an open source project for running the APISIX Gateway as a Kubernetes Ingress.

Homepage Helm chart

Docker Hardened Image

A highly customizable homepage (or startpage / application dashboard) with Docker and service API integrations.

MongoDB Controllers for Kubernetes (MCK)

Docker Hardened Image

A Kubernetes operator that enables users to run MongoDB in Kubernetes

KServe Agent

Docker Hardened Image

KServe Agent is a component that manages model serving workloads in KServe.

KServe LocalModelNode Agent

Docker Hardened Image

Enables local model node management and caching.

APISIX Helm chart

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

SPIFFE Helper

Docker Hardened Image

Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.

Grafana Agent Operator

Docker Hardened Image

a Kubernetes operator that simplifies deploying and managing Grafana Agent instances for collecting metrics, logs, and traces.

KServe LocalModel Controller

Docker Hardened Image

Enables local model caching and management.

KServe Router

Docker Hardened Image

The routing component for KServe inference graphs, enabling complex model serving patterns with intelligent traffic routing.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

NGINX Ingress Controller Helm chart

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

WireMock GUI

Docker Hardened Image

WireMock with an Angular admin webapp; a community fork by Christopher Holomek that adds an interactive browser UI for managing stubs, request logs, and recordings.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

GitHub MCP Server

Docker Hardened Image

GitHub's official MCP Server connects AI tools directly to GitHub's platform. This gives AI agents, assistants, and chatbots the ability to read repositories and code files, manage issues and PRs, analyze code, and automate workflows.

Cilium DNS Proxy

Docker Hardened Image

Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.

Handshake service for kernel TLS consumers

Jaeger Query

Docker Hardened Image

Jaeger Query is the Jaeger v2 distributed-tracing query service: it serves the Jaeger UI and the HTTP/gRPC query API for retrieving traces from a storage backend.

Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped