Calico CTL

Docker Hardened Image

Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.

Cilium startup script

Docker Hardened Image

Cilium startup script

hashicorp/http-echo

HashiCorp, an IBM Company

http-echo is an in-memory web server that echos back the arguments given to it.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

Cilium DNS Proxy

Docker Hardened Image

Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.

hashicorp/consul-enterprise

HashiCorp, an IBM Company

Consul is a datacenter runtime that provides service discovery, configuration, and orchestration.

Handshake service for kernel TLS consumers

Rancher Fleet Controller

haproxytech/kubernetes-ingress

HAProxy Technologies

HAProxy ingress controller for K8s

Rancher 1.x Server Container

Calico Typha

Docker Hardened Image

Calico fan-out proxy that scales access to the Calico datastore for large clusters.

Calico Goldmane

Docker Hardened Image

Calico flow aggregation service for network flow telemetry.

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Calico Whisker Backend

Docker Hardened Image

Backend API service for the Calico Whisker network flow visualization UI.

zabbix/zabbix-proxy-sqlite3

Zabbix

Zabbix proxy with SQLite3 database support

Calico CSI

Docker Hardened Image

Calico CSI driver for secure connections from Kubernetes pods to local daemons.

istio/proxyv2

istio

Istio proxy

istio/pilot

istio

Istiod (formerly known as Pilot)

haproxytech/haproxy-debian

HAProxy Technologies

HAProxy CE Docker Debian image

Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

Calico Pod2Daemon FlexVol

Docker Hardened Image

Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.

wait-for-it

Docker Hardened Image

A pure bash script to test and wait on the availability of a TCP host and port. Useful for synchronizing the spin-up of interdependent services in Docker Compose.

docker/ucp-cfssl

Docker, Inc.

Please refer to the docker/ucp image for more information

Tailscale Kubernetes Operator

Docker Hardened Image

Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.

grafana/rollout-operator

Grafana Labs

Grafana Multi Availability-Zone Rollout Operator for Kubernetes