Cilium Hubble Export to Stdout

Docker Hardened Image

Streams Hubble network flow export logs to stdout for log collection

Google Cloud CLI

Docker Hardened Image

The Google Cloud CLI (gcloud, bq, gsutil) for managing Google Cloud Platform resources. The -emulators flavor additionally bundles Google's local service emulators for Cloud Datastore, Cloud Firestore, Pub/Sub, Cloud Bigtable, and Cloud Spanner (linux/amd64 only), for developing and testing against Google Cloud APIs entirely offline.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

WireMock

Docker Hardened Image

Flexible API mocking tool for service virtualization that enables developers to simulate HTTP-based APIs for testing purposes.

Git MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to read, search, and manipulate Git repositories programmatically via LLMs.

SpiceDB Operator

Docker Hardened Image

SpiceDB Operator manages SpiceDB authorization database instances in Kubernetes via SpiceDBCluster custom resources, handling provisioning, configuration, and version upgrades.

Time MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools for time queries and timezone conversions for LLMs.

Node Problem Detector

Docker Hardened Image

A Kubernetes daemon that detects node-level problems — kernel issues, hardware faults, and runtime failures — and reports them to the API server as Events and NodeConditions.

SPIFFE Helper

Docker Hardened Image

Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.

Jaeger Ingester

Docker Hardened Image

Jaeger v2 unified binary preconfigured to ingest spans from Kafka into a storage backend.

Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.

GitLab Shell

Docker Hardened Image

GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.

Node Feature Discovery

Docker Hardened Image

Node feature discovery for Kubernetes.

KServe Agent

Docker Hardened Image

KServe Agent is a component that manages model serving workloads in KServe.

MongoDB Controllers for Kubernetes (MCK)

Docker Hardened Image

A Kubernetes operator that enables users to run MongoDB in Kubernetes

ChartMuseum

Docker Hardened Image

An open-source Helm Chart Repository server with support for cloud and local storage backends.

NVIDIA DCGM Exporter

Docker Hardened Image

NVIDIA Data Center GPU Manager exporter for Prometheus. Exposes GPU telemetry (utilization, memory, temperature, power, profiling) over an HTTP /metrics endpoint via the DCGM library.

Valkey Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Valkey clusters. Handles provisioning, scaling, upgrades, and failure remediation for Valkey workloads running on Kubernetes.

Open Cluster Management Registration

Docker Hardened Image

Registration controller and agent for Open Cluster Management hub and spoke cluster lifecycle.

Calico Whisker Backend

Docker Hardened Image

Backend API service for the Calico Whisker network flow visualization UI.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

GitLab Workhorse

Docker Hardened Image

GitLab Workhorse is the smart reverse proxy that sits in front of GitLab, handling resource-intensive HTTP requests such as file uploads and downloads, Git operations, and archive downloads.

Git-sync

Docker Hardened Image

git-sync is a sidecar that pulls a git repository into a local directory, keeping it synced to a remote.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

KServe Router

Docker Hardened Image

The routing component for KServe inference graphs, enabling complex model serving patterns with intelligent traffic routing.

Cert Exporter

Docker Hardened Image

A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets

NetBox

Docker Hardened Image

NetBox is the open-source network infrastructure source of truth — IPAM and DCIM in one Django application.

Calico Goldmane

Docker Hardened Image

Calico flow aggregation service for network flow telemetry.