Dapr Placement Service

Docker Hardened Image

Kubernetes control plane service that manages actor placement using a consistent hash ring, enabling distributed actor instances across the cluster with automatic rebalancing.

Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.

Dapr Sentry

Docker Hardened Image

Dapr Sentry certificate authority that issues mTLS certificates for secure communication between Dapr sidecars and control plane components.

cimg/ruby

CircleCI

The CircleCI Ruby Docker Convenience Image.

Velero Plugin for Azure

Docker Hardened Image

Plugin to support running Velero on Azure.

Open Cluster Management Addon Manager

Docker Hardened Image

Runs on the hub cluster and configures the installation of addon agents for each managed cluster.

Dapr Operator

Docker Hardened Image

Kubernetes operator that manages Dapr component Custom Resources (state stores, pub/sub, bindings, etc.) and provides validation webhooks for component configurations.

Dapr Scheduler

Docker Hardened Image

A Dapr control-plane service that manages persistent job scheduling, reminders, and timers for distributed applications.

Velero Plugin for GCP

Docker Hardened Image

Plugin to support running Velero on GCP.

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

Placement

Docker Hardened Image

A Kubernetes controller that makes placement decisions for workloads across managed clusters based on Placement APIs.

grafana/mimir

Grafana Labs

Horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

Source Watcher

Docker Hardened Image

Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.

A container management platform built for organizations that deploy containers in production.

amazon/aws-otel-collector

Amazon Web Services

AWS Distro for OpenTelemetry Collector is a AWS supported version of OpenTelemetry Collector.

Rancher Fleet Agent

GitLab Shell

Docker Hardened Image

GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.

Open Cluster Management Registration

Docker Hardened Image

Registration controller and agent for Open Cluster Management hub and spoke cluster lifecycle.

GitLab Workhorse

Docker Hardened Image

GitLab Workhorse is the smart reverse proxy that sits in front of GitLab, handling resource-intensive HTTP requests such as file uploads and downloads, Git operations, and archive downloads.

Git-sync

Docker Hardened Image

git-sync is a sidecar that pulls a git repository into a local directory, keeping it synced to a remote.

sonatype/nexus3

Sonatype

Sonatype Nexus Repository 3

Actions Runner Controller

Docker Hardened Image

Kubernetes controller that orchestrates ephemeral self-hosted GitHub Actions runners using autoscaling runner scale sets.

hashicorp/tfc-agent

HashiCorp, an IBM Company

Terraform Cloud Agent

amazon/aws-alb-ingress-controller

Amazon Web Services

AWS ALB Ingress Controller

hashicorp/consul-template

HashiCorp, an IBM Company

Consul Template is a template renderer, notifier, and supervisor for HashiCorp Consul and Vault.

Apache Spark Kubernetes Operator

Docker Hardened Image

Kubernetes operator for managing Apache Spark applications and clusters on Kubernetes

cimg/openjdk

CircleCI

The CircleCI OpenJDK (Java) Docker Convenience Image.