Cilium Hubble Relay

Docker Hardened Image

Relay server for aggregating and exposing Hubble observability data

Envoy Gateway Helm chart

Docker Hardened Image

Envoy Gateway helm chart is an open source project for managing Envoy Proxy as a Kubernetes-based application gateway.

Grafana Image Renderer

Docker Hardened Image

Headless browser service for rendering Grafana panels and dashboards as PNG images and PDF documents using Chromium.

Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

Azure Functions (Node.js)

Docker Hardened Image

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

Reloader

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

Flyway

Docker Hardened Image

Flyway is an open-source database migration tool that simplifies the evolution of your database schema.

Ceph CSI

Docker Hardened Image

Container Storage Interface driver for Ceph-backed RBD, CephFS, NFS, and NVMe-oF workloads on Kubernetes.

JRuby

Docker Hardened Image

JRuby is an implementation of the Ruby programming language that runs on the Java Virtual Machine (JVM).

K8ssandra Operator

Docker Hardened Image

Kubernetes operator for managing multi-cluster Apache Cassandra deployments with K8ssandra. Provides automated lifecycle management, backup/restore, and monitoring capabilities.

Prometheus Pushgateway

Docker Hardened Image

A push gateway for Prometheus that accepts metrics from ephemeral or batch jobs and exposes them for scraping by Prometheus.

kube-vip

Docker Hardened Image

Virtual IP and load balancer for Kubernetes

Kubernetes Scheduler (kube-scheduler)

Docker Hardened Image

Schedules pods onto nodes. kube-scheduler watches for newly created pods with no assigned node, and selects a node for them to run on.

Karpenter

Docker Hardened Image

karpenter is an efficient node manager for kubernetes clusters

LiteLLM

Docker Hardened Image

LiteLLM is a universal LLM API gateway that provides OpenAI-compatible APIs for 100+ LLM providers including Bedrock, Azure, OpenAI, Anthropic, Vertex AI, and more.

OpenCost

Docker Hardened Image

OpenCost is an open source cost monitoring tool for Kubernetes and cloud spend

Perl

Docker Hardened Image

Perl is a high-level, general-purpose, interpreted, dynamic programming language known for its text processing capabilities and extensive CPAN ecosystem.

Apache Druid

Docker Hardened Image

Apache Druid is a high performance real-time analytics database designed for workflows where fast queries and ingest really matter.

Promtail Helm chart

Docker Hardened Image

Agent which ships the contents of local logs to a private Grafana Loki instance or Grafana Cloud.

Etcd

Docker Hardened Image

Etcd is a strongly consistent, distributed key-value store that provides reliable data storage

Docker

Docker Hardened Image

The Docker CLI is the official command-line interface for Docker. It provides commands to build, run, and manage Docker containers and images.

Prometheus Blackbox Exporter

Docker Hardened Image

Prometheus exporter for probing network endpoints via HTTP, HTTPS, DNS, TCP, ICMP, and gRPC.

Kyverno Readiness Checker

Docker Hardened Image

Kyverno Readiness Checker is a component that checks the readiness of a Kyverno installation

AWS EFS CSI Driver

Docker Hardened Image

The AWS EFS CSI driver provides Container Storage Interface (CSI) support for Amazon EFS file systems in Kubernetes clusters. It enables dynamic and static provisioning of EFS volumes.

Syft

Docker Hardened Image

Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.

Cassandra Reaper

Docker Hardened Image

Cassandra Reaper is a centralized, stateful, highly available tool for running Apache Cassandra repairs against single or multi-site clusters.

Kubernetes Proxy (kube-proxy)

Docker Hardened Image

Maintains network rules on nodes to enable service virtual IPs and load balancing. kube-proxy reflects services defined in the Kubernetes API and maintains network rules on nodes to implement service behavior.

k6

Docker Hardened Image

Grafana k6 is a modern load testing tool using Go and JavaScript for performance testing

Argo CD Image Updater Helm chart

Docker Hardened Image

A tool to automatically update container images of Kubernetes workloads managed by Argo CD.

Grype

Docker Hardened Image

Grype is a vulnerability scanner for container images and filesystems. It provides fast and accurate vulnerability detection with support for multiple package ecosystems and output formats.