AWS Private CA Issuer

Docker Hardened Image

AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.

Vertical Pod Autoscaler Admission Controller

Docker Hardened Image

Admission webhook controller for Kubernetes Vertical Pod Autoscaler that sets resource requests on new pods.

Keycloak Helm chart

Docker Hardened Image

Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.

CSI External Health Monitor Controller

Docker Hardened Image

csi-external-health-monitor-controller is a Kubernetes CSI sidecar component that monitors the health of CSI volumes and reports anomalies to the Kubernetes API.

RabbitMQ Helm chart

Docker Hardened Image

RabbitMQ is an open source multi-protocol messaging broker.

Azure Service Operator Helm chart

Docker Hardened Image

Azure Service Operator allows you to create Azure resources using kubectl.

Karpenter

Docker Hardened Image

Open-source Kubernetes node autoscaler built for flexibility, performance, and simplicity

ORAS

Docker Hardened Image

ORAS (OCI Registry As Storage) is a command-line tool for managing OCI artifacts in registries. It enables developers to push, pull, copy, and discover various content types beyond container images.

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

FleetConfig Controller

Docker Hardened Image

Kubernetes controller for managing Open Cluster Management FleetConfig hub and spoke resources.

Jenkins Inbound Agent

Docker Hardened Image

Jenkins Inbound Agent is a specialized Docker image for Kubernetes and containerized environments. It automatically connects to a Jenkins controller using environment variables, making it ideal for dynamic agent provisioning in Kubernetes clusters and CI/CD pipelines.

Grafana Helm chart

Docker Hardened Image

Query, visualize, alert on, and explore your metrics, logs, and traces wherever they are stored.

DataHub MCE Consumer

Docker Hardened Image

The DataHub MCE Consumer is a Kafka consumer service that processes MetadataChangeProposal events from upstream sources (ingestion CLI, actions framework) and applies them to DataHub's metadata storage layer via the GMS API, writing failures back to the FailedMetadataChangeProposal topic for retry.

GitLab Runner Helper

Docker Hardened Image

GitLab Runner Helper handles git operations, artifact upload/download, and cache management for GitLab CI/CD jobs.

Piraeus Operator

Docker Hardened Image

Kubernetes operator that manages LINSTOR clusters and automates deployment, scaling, and management of LINSTOR storage clusters in Kubernetes.

Etcd Helm chart

Docker Hardened Image

Etcd is a strongly consistent, distributed key-value store that provides reliable data storage

Fluent Bit Helm chart

Docker Hardened Image

Fluent Bit is an open source data collector for unified logging layer.

OpenBao

Docker Hardened Image

OpenBao provides a solution to manage, store, and distribute sensitive data, including secrets, certificates, and keys

Terraform

Docker Hardened Image

Terraform enables you to safely and predictably create, change, and improve infrastructure. It codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

Fairwinds VPA Helm chart

Docker Hardened Image

Helm chart to install Kubernetes Vertical Pod Autoscaler that suits Fairwinds suit of products.

Jsonnet

Docker Hardened Image

A configuration language for app and tool developers. A simple extension of JSON. Eliminate duplication with object-orientation.

Vertical Pod Autoscaler Updater

Docker Hardened Image

Monitors the VPA resources and compares current Pod resource requests with the recommendations, evicting and updating pod resources accordingly.

Percona XtraBackup

Docker Hardened Image

Percona XtraBackup is an open-source hot backup utility for MySQL that performs non-blocking backups for InnoDB, XtraDB, and MyISAM databases.

Grafana Agent Helm chart

Docker Hardened Image

Lightweight telemetry collector for metrics, logs, traces, and profiles

OpenTelemetry Go Autoinstrumentation

Docker Hardened Image

This is a Golang autoinstrumentation agent used by the OpenTelemetry Operator

Apache HTTP Server

Docker Hardened Image

The Apache HTTP Server (httpd) is a robust, extensible, and widely used web server for serving static and dynamic content. This Docker Hardened Image provides a minimal, non-root runtime of Apache HTTP Server suitable for production deployments.

OpenCost UI

Docker Hardened Image

Web-based UI for OpenCost Kubernetes cost monitoring

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.