Prometheus Adapter

Docker Hardened Image

Prometheus Adapter implements the custom.metrics.k8s.io and external.metrics.k8s.io APIs for Kubernetes HPA and VPA, exposing metrics from Prometheus.

Cilium Hubble Proto

Docker Hardened Image

Protocol buffer definitions for Hubble, the networking and security observability platform for Cilium

Goldilocks

Docker Hardened Image

A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.

Terraform

Docker Hardened Image

Terraform enables you to safely and predictably create, change, and improve infrastructure. It codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

Velero Helm chart

Docker Hardened Image

Velero is an open source tool to safely back up and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes.

Docker Scout CLI

Docker Hardened Image

Command-line interface for Docker Scout providing container image analysis, vulnerability scanning, and policy evaluation capabilities for securing your software supply chain.

Certbot

Docker Hardened Image

EFF's ACME client for obtaining and renewing TLS certificates from Let's Encrypt and any ACME-compatible CA.

ORAS

Docker Hardened Image

ORAS (OCI Registry As Storage) is a command-line tool for managing OCI artifacts in registries. It enables developers to push, pull, copy, and discover various content types beyond container images.

Kyverno Policy Reporter UI

Docker Hardened Image

The Kyverno Policy Reporter UI watches for PolicyReport Resources and displays information on a web based UI

OpenTelemetry Target Allocator

Docker Hardened Image

The Target Allocator (TA) is an optional component of the OpenTelemetry Operator that discovers Prometheus targets and shards them across a fleet of OpenTelemetry Collector instances. It provides HTTP endpoints that Collectors use to fetch their assigned scrape targets (e.g. /jobs, /jobs/{job}/targets, /scrape_configs) and supports config-file and CR-based discovery.

Piraeus CSI NFS Server

Docker Hardened Image

NFS server component for LINSTOR CSI that enables ReadWriteMany (RWX) volume access in Kubernetes using DRBD Reactor for high availability.

JupyterHub K8s Hub

Docker Hardened Image

JupyterHub hub component for Zero to JupyterHub on Kubernetes, with Kubespawner and authenticators.

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

OpenSearch Dashboards Helm chart

Docker Hardened Image

OpenSearch Dashboards is a data visualization and user interface for OpenSearch

Apache NiFi

Docker Hardened Image

A data integration and workflow automation tool that supports powerful and scalable directed graphs of data routing, transformation, and mediation logic.

CDI Upload Server

Docker Hardened Image

CDI Upload Server handles the upload of virtual machine disk images into persistent volume claims

Grafana Operator

Docker Hardened Image

A Kubernetes operator for managing Grafana instances, dashboards, and datasources declaratively.

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

cert-manager-istio-csr

Docker Hardened Image

Certificate signing request agent for integrating cert-manager with Istio

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

Keycloak Helm chart

Docker Hardened Image

Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.

VersityGW

Docker Hardened Image

VersityGW is a high-performance S3 translation service.

ClickHouse Keeper

Docker Hardened Image

ClickHouse Keeper is a ZooKeeper-compatible coordination service for ClickHouse cluster replication and distributed DDL.

Karpenter

Docker Hardened Image

Open-source Kubernetes node autoscaler built for flexibility, performance, and simplicity

ClickHouse Operator

Docker Hardened Image

Altinity's Kubernetes operator for managing ClickHouse clusters.

VictoriaMetrics VMAlert

Docker Hardened Image

VictoriaMetrics VMAlert is a alerting and recording rules evaluation component for VictoriaMetrics.

Apache HTTP Server

Docker Hardened Image

The Apache HTTP Server (httpd) is a robust, extensible, and widely used web server for serving static and dynamic content. This Docker Hardened Image provides a minimal, non-root runtime of Apache HTTP Server suitable for production deployments.

API Declarative CLI (ADC)

Docker Hardened Image

ADC is a command line utility that interfaces with API7 Enterprise and Apache APISIX Admin APIs.

CSI External Health Monitor Controller

Docker Hardened Image

csi-external-health-monitor-controller is a Kubernetes CSI sidecar component that monitors the health of CSI volumes and reports anomalies to the Kubernetes API.

Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.