K8ssandra Cass Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Apache Cassandra clusters. Handles provisioning, scaling, rolling restarts, upgrades, and failure remediation for production-grade Cassandra workloads in Kubernetes environments.

Dapr Sentry

Docker Hardened Image

Dapr Sentry certificate authority that issues mTLS certificates for secure communication between Dapr sidecars and control plane components.

Open Cluster Management Work

Docker Hardened Image

Work agent for dispatching Kubernetes manifests to managed clusters via the ManifestWork API.

Dapr Operator

Docker Hardened Image

Kubernetes operator that manages Dapr component Custom Resources (state stores, pub/sub, bindings, etc.) and provides validation webhooks for component configurations.

Deno

Docker Hardened Image

Deno is a secure runtime for JavaScript and TypeScript with built-in tooling, modern standards support, and first-class TypeScript support.

Registration Operator

Docker Hardened Image

Kubernetes operator for managing Open Cluster Management hub and spoke components.

Connaisseur

Docker Hardened Image

A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.

Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

amazon-k8s-cni-init

Docker Hardened Image

Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.

Kubernetes Ingress Default Backend

Docker Hardened Image

A minimal Kubernetes default backend server for unmatched ingress requests.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network

Open Cluster Management Addon Manager

Docker Hardened Image

Runs on the hub cluster and configures the installation of addon agents for each managed cluster.

netdata/netdata

Netdata

The official image for monitoring systems, containers and applications with Netdata.

Cass Config Builder

Docker Hardened Image

Configuration templating engine for Apache Cassandra, used by the DataStax Kubernetes Operator.

Dapr Scheduler

Docker Hardened Image

A Dapr control-plane service that manages persistent job scheduling, reminders, and timers for distributed applications.

Cilium Hubble Export to Stdout

Docker Hardened Image

Streams Hubble network flow export logs to stdout for log collection

Configurable HTTP Proxy

Docker Hardened Image

node-http-proxy plus a REST API for dynamic JupyterHub routing.

newrelic/nri-ecs

New Relic

New Relic AWS ECS integration

CDI Upload Proxy

Docker Hardened Image

CDI Upload Proxy forwards upload requests to the CDI upload server for virtual machine disk images

storm

Docker Official Image

Apache Storm is a free and open source distributed realtime computation system.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Kafka Exporter

Docker Hardened Image

A Prometheus exporter for Kafka metrics

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Calico Typha

Docker Hardened Image

Calico fan-out proxy that scales access to the Calico datastore for large clusters.

Source Watcher

Docker Hardened Image

Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.

WBITT Network Multitool

Docker Hardened Image

A multi-arch multitool for container and network testing and troubleshooting. Includes a comprehensive set of networking utilities and a minimal nginx web server for easy access and testing. The -extra flavor includes additional tools for advanced networking, database connectivity, and security testing.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

hashicorp/terraform

HashiCorp, an IBM Company

Automatic builds of Terraform. See README for more use and info.