cert-manager-acmesolver

Docker Hardened Image

CA injector component for cert-manager

OpenSCAP

Docker Hardened Image

The OpenSCAP program is a command line tool that allows users to load, scan, validate, edit, and export SCAP documents.

Trivy

Docker Hardened Image

Trivy is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.

Vault

Docker Hardened Image

Vault is a tool for securely accessing secrets.

Cert Manager Controller

Docker Hardened Image

Controller component for cert-manager

External Secrets Operator

Docker Hardened Image

External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Secrets Manager, Pulumi ESC and many more

Keycloak

Docker Hardened Image

Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.

Cert-manager-webhook

Docker Hardened Image

A minimal Cert Manager webhook image

cert-manager-cainjector

Docker Hardened Image

CA injector component cert-manager image

Harbor Trivy Adapter

Docker Hardened Image

Harbor scanner adapter that wraps the Trivy vulnerability scanner to provide a REST API for scanning container images.

Kyverno

Docker Hardened Image

Kyverno is a Kubernetes-native policy engine for validating, mutating, and generating Kubernetes resources using YAML policies.

Kyverno Background Controller

Docker Hardened Image

Kyverno is a component that continuously monitors and enforces policies on existing resources in the cluster, ensuring ongoing compliance.

Kyverno Reports Controller

Docker Hardened Image

Kyverno Reports Controller is a component that continuously monitors and enforces policies on existing resources in a Kubernetes

Kyverno Cleanup Controller

Docker Hardened Image

Kyverno is a component that continuously monitors and enforces policies on existing resources in the cluster, ensuring ongoing compliance.

Kyverno Init

Docker Hardened Image

Kyverno is a component that continuously monitors and enforces policies on existing resources in a kubernetes cluster, ensuring ongoing compliance.

Istio Install CNI

Docker Hardened Image

Istio CNI installer image and daemonset for Kubernetes environments

Calico Kube Controllers

Docker Hardened Image

Calico controller manager that reconciles IPAM, network policy, and Calico CRD state.

Harbor Registry Control

Docker Hardened Image

A minimal HTTP service providing management APIs for Docker registry operations like garbage collection and health monitoring

Harbor Job Service is the asynchronous task execution component of Harbor registry that handles background operations like replication, garbage collection, vulnerability scanning, and retention policies.

kube-rbac-proxy

Docker Hardened Image

a small HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using SubjectAccessReview.

Kyverno CLI

Docker Hardened Image

The Kyverno Command Line Interface (CLI) is designed to validate and test policy behavior to resources prior to adding them to a cluster.

SPIFFE SPIRE Server

Docker Hardened Image

Central SPIRE control plane that issues and manages SPIFFE workload identities.

SPIFFE SPIRE Agent

Docker Hardened Image

Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.

Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

clamav

Docker Hardened Image

ClamAV is an open source (GPLv2) anti-virus toolkit, designed especially for e-mail scanning on mail gateways.

OAuth2 Proxy

Docker Hardened Image

A reverse proxy that provides authentication using OAuth2 and OIDC providers.

Istio Pilot

Docker Hardened Image

Istio control plane component that configures proxies and handles service discovery

Kyverno Readiness Checker

Docker Hardened Image

Kyverno Readiness Checker is a component that checks the readiness of a Kyverno installation

Syft

Docker Hardened Image

Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.

Grype

Docker Hardened Image

Grype is a vulnerability scanner for container images and filesystems. It provides fast and accurate vulnerability detection with support for multiple package ecosystems and output formats.