Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

WireMock

Docker Hardened Image

Flexible API mocking tool for service virtualization that enables developers to simulate HTTP-based APIs for testing purposes.

Git MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to read, search, and manipulate Git repositories programmatically via LLMs.

n8nio/n8n

n8n GmbH

Free and open fair-code licensed node based Workflow Automation Tool.

Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.

Rancher Fleet Agent

SpiceDB Operator

Docker Hardened Image

SpiceDB Operator manages SpiceDB authorization database instances in Kubernetes via SpiceDBCluster custom resources, handling provisioning, configuration, and version upgrades.

Time MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools for time queries and timezone conversions for LLMs.

Node Problem Detector

Docker Hardened Image

A Kubernetes daemon that detects node-level problems — kernel issues, hardware faults, and runtime failures — and reports them to the API server as Events and NodeConditions.

SPIFFE Helper

Docker Hardened Image

Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.

emqx

Docker Official Image

DEPRECATED; The most scalable open-source MQTT broker for IoT, IIoT, connected vehicles, and more.

newrelic/newrelic-prometheus-configurator

New Relic

New Relic Prometheus Configurator Image

hello-seattle

Docker Official Image

Hello from DockerCon 2016 (Seattle)!

Jaeger Ingester

Docker Hardened Image

Jaeger v2 unified binary preconfigured to ingest spans from Kafka into a storage backend.

GitLab Shell

Docker Hardened Image

GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.

Node Feature Discovery

Docker Hardened Image

Node feature discovery for Kubernetes.

KServe Agent

Docker Hardened Image

KServe Agent is a component that manages model serving workloads in KServe.

MongoDB Controllers for Kubernetes (MCK)

Docker Hardened Image

A Kubernetes operator that enables users to run MongoDB in Kubernetes

ChartMuseum

Docker Hardened Image

An open-source Helm Chart Repository server with support for cloud and local storage backends.

NVIDIA DCGM Exporter

Docker Hardened Image

NVIDIA Data Center GPU Manager exporter for Prometheus. Exposes GPU telemetry (utilization, memory, temperature, power, profiling) over an HTTP /metrics endpoint via the DCGM library.

Valkey Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Valkey clusters. Handles provisioning, scaling, upgrades, and failure remediation for Valkey workloads running on Kubernetes.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

Calico Whisker Backend

Docker Hardened Image

Backend API service for the Calico Whisker network flow visualization UI.

Open Cluster Management Registration

Docker Hardened Image

Registration controller and agent for Open Cluster Management hub and spoke cluster lifecycle.

GitLab Workhorse

Docker Hardened Image

GitLab Workhorse is the smart reverse proxy that sits in front of GitLab, handling resource-intensive HTTP requests such as file uploads and downloads, Git operations, and archive downloads.