Amazon EKS Pod Identity Webhook

Docker Hardened Image

The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.

Stunnel

Docker Hardened Image

stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.

vSphere CSI Driver

Docker Hardened Image

Container Storage Interface (CSI) driver for VMware vSphere. Provisions and attaches vSphere volumes for Kubernetes workloads, running as the CSI controller plugin and as the node plugin that formats and mounts volumes.

Jupyter Data Science Notebook

Docker Hardened Image

A minimal Jupyter Notebook image with Python, R, and Julia for multi-language data science workflows.

Selenium Hub

Docker Hardened Image

Central coordinator of a Selenium Grid that receives WebDriver session requests from test clients and routes them to registered browser Nodes, enabling parallel and distributed browser automation at scale.

Forklift Operator

Docker Hardened Image

Forklift Operator deploys and manages the Forklift toolkit for migrating virtual machines from VMware, oVirt, OpenStack, Hyper-V, EC2, and OVA sources to KubeVirt.

JupyterHub K8s Singleuser Sample

Docker Hardened Image

A minimal JupyterLab single-user server image for JupyterHub on Kubernetes.

Kyverno Policies Helm chart

Docker Hardened Image

Kubernetes Pod Security Standards implemented as Kyverno policies.

Forklift API

Docker Hardened Image

Forklift API is the API server component of the Forklift VM migration toolkit. It serves the mutating and validating admission webhooks for Forklift custom resources and the auxiliary HTTP services the Forklift controller calls during migrations to KubeVirt.

ShellCheck

Docker Hardened Image

ShellCheck is a shell script static analysis tool that gives warnings and suggestions for bash/sh shell scripts to point out and clarify syntax issues, semantic problems and subtle caveats, corner cases and pitfalls

Kiali

Docker Hardened Image

Kiali is the Istio service mesh console: it visualizes traffic, health, and configuration for workloads on Kubernetes and OpenShift clusters.

MongoDB Helm chart

Docker Hardened Image

MongoDB is a source-available cross-platform document-oriented database program.

AWS Provider for Secrets Store CSI Driver

Docker Hardened Image

The AWS provider for the Secrets Store CSI Driver fetches secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store and mounts them into Kubernetes pods as files, supporting both IRSA and EKS Pod Identity authentication.

Forklift Controller

Docker Hardened Image

Forklift Controller orchestrates migrations of virtual machines from VMware, oVirt, OpenStack, OVA, and Hyper-V to KubeVirt.

R

Docker Hardened Image

R is a free software environment for statistical computing and graphics.

Forklift oVirt Populator

Docker Hardened Image

Forklift oVirt Populator downloads a disk from an oVirt engine into a Kubernetes PersistentVolumeClaim during a Forklift migration, bundling the ovirt-img client and the QEMU disk tools it runs.

Brave Search MCP Server

Docker Hardened Image

Official Brave Software MCP server exposing the Brave Search API (web, image, video, news, local, and AI summarization) to MCP clients.

Postman MCP Server

Docker Hardened Image

The official Postman MCP server that connects AI tools and assistants to the Postman API — managing collections, workspaces, environments, API specifications, and more — via stdio transport with Minimal, Code, and Full toolset configurations.

Percona Server for MongoDB

Docker Hardened Image

Percona Server for MongoDB is a source-available, drop-in replacement for MongoDB Community Edition with enterprise-grade features.

Forklift virt-v2v

Docker Hardened Image

Forklift virt-v2v converts VM guest disks for migration to KubeVirt, wrapping libguestfs's virt-v2v tool

Forklift OpenStack Populator

Docker Hardened Image

Forklift OpenStack Populator streams a Glance image from an OpenStack source cloud into a Kubernetes PersistentVolumeClaim during a Forklift migration.

vSphere CSI Syncer

Docker Hardened Image

Metadata syncer for the VMware vSphere CSI driver. Runs alongside the CSI controller and synchronizes volume metadata between Kubernetes and the vSphere Cloud Native Storage (CNS) inventory.

Envoy Contrib

Docker Hardened Image

Envoy built with the contrib extensions, adding protocol filters such as Postgres, MySQL, Kafka, SIP, and RocketMQ on top of the core high-performance L7 proxy.

SpiceDB Operator Helm chart

Docker Hardened Image

Kubernetes operator for managing SpiceDB fine-grained authorization clusters

Miniconda3

Docker Hardened Image

Anaconda's Miniconda3 — a minimal conda installer bundling Python and the conda package manager. A dev-only base layer for data-science and scientific-computing workflows that build their own conda environments.

Rundeck

Docker Hardened Image

Rundeck is a runbook automation and self-service operations platform for defining jobs and running commands or scripts across nodes over SSH, on schedules or on demand, with access control, logging, and audit.

Jaeger

Docker Hardened Image

A minimal Jaeger v2 all-in-one distributed tracing image

Notion MCP Server

Docker Hardened Image

The official Notion MCP server that exposes 22 Notion API tools — pages, databases, comments, blocks, search, and more — to MCP clients such as Claude Desktop, Cursor, Zed, and GitHub Copilot CLI via stdio or HTTP transport.

JupyterHub K8s Secret Sync

Docker Hardened Image

A minimal ACME certificate sync image for JupyterHub on Kubernetes.

Tigera Operator Helm chart

Docker Hardened Image

Helm chart for installing the Tigera operator to deploy and manage Calico.