Virt Handler

Docker Hardened Image

Virt Handler manages virtual machine processes on each node in a KubeVirt cluster

Grafana Loki Canary

Docker Hardened Image

Loki Canary - Test tool for Grafana Loki installations

Cilium Clustermesh API Server

Docker Hardened Image

Cilium Clustermesh API Server is a load balancing API for Cilium clusters

Ceph (Rook)

Docker Hardened Image

Ceph is a distributed storage system providing object, block, and file storage interfaces. This image contains Ceph daemon binaries for use with the Rook Kubernetes operator for cloud-native storage orchestration.

kube-rbac-proxy

Docker Hardened Image

a small HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using SubjectAccessReview.

Scalable datastore for metrics, events, and real-time analytics

Azure Functions (Node.js)

Docker Hardened Image

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

clamav

Docker Hardened Image

ClamAV is an open source (GPLv2) anti-virus toolkit, designed especially for e-mail scanning on mail gateways.

Cilium

Docker Hardened Image

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

Langfuse Worker

Docker Hardened Image

Background job processor for the Langfuse LLM engineering platform, handling evaluations, ingestion, batch exports, and data retention.

Helm Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Helm charts declared as HelmRelease resources in Kubernetes, enabling GitOps-driven Helm deployments.

SPIFFE SPIRE Server

Docker Hardened Image

Central SPIRE control plane that issues and manages SPIFFE workload identities.

Flyway

Docker Hardened Image

Flyway is an open-source database migration tool that simplifies the evolution of your database schema.

SPIFFE SPIRE Agent

Docker Hardened Image

Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.

Uptime Kuma

Docker Hardened Image

Uptime Kuma is a open-source, self-hosted monitoring tool.

Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

Langfuse

Docker Hardened Image

Langfuse is an open-source LLM engineering platform for observability, prompt management, evaluations, and datasets.

pgvector

Docker Hardened Image

PostgreSQL with the pgvector extension for open-source vector similarity search.

Kustomize Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Kustomize-based manifests declared as Kustomization resources in Kubernetes, enabling GitOps-driven continuous delivery.

Notification Controller

Docker Hardened Image

Flux CD component that dispatches events to external notification providers and exposes a webhook receiver endpoint for triggering reconciliation from external systems.

Metrics Server

Docker Hardened Image

Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines. It collects resource metrics from Kubelets and exposes them in Kubernetes apiserver through Metrics API for use by Horizontal Pod Autoscaler and Vertical Pod Autoscaler.

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

Istio Pilot

Docker Hardened Image

Istio control plane component that configures proxies and handles service discovery

Cilium Envoy

Docker Hardened Image

Envoy proxy for Cilium with minimal Envoy extensions and Cilium policy enforcement filters.

Grafana Tempo

Docker Hardened Image

Grafana Tempo is an open source, easy-to-use, and high-scale distributed tracing backend.

Grafana Image Renderer

Docker Hardened Image

Headless browser service for rendering Grafana panels and dashboards as PNG images and PDF documents using Chromium.

Virt Operator

Docker Hardened Image

Virt Operator deploys and manages the KubeVirt virtualization infrastructure in Kubernetes

Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

Virt Controller

Docker Hardened Image

Virt Controller manages the lifecycle of virtual machines in KubeVirt

Virt Export Server

Docker Hardened Image

Virt Export Server serves virtual machine volume exports in KubeVirt