Cilium DNS Proxy

Docker Hardened Image

Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.

Tailscale

Docker Hardened Image

Tailscale lets you securely connect devices and containers without exposing them to the public internet.

NGINX Ingress Controller

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

portainer/portainer-ce

Portainer.io

Portainer CE - a lightweight service delivery platform for containerized applications

dynatrace/dynatrace-operator

Dynatrace

Automate Kubernetes observability with Dynatrace

MetalLB Speaker

Docker Hardened Image

MetalLB speaker component announces LoadBalancer services to the network using Layer 2 ARP or BGP routing protocols on bare metal Kubernetes clusters.

grafana/synthetic-monitoring-agent

Grafana Labs

Blackbox Exporter agent which executes checks for the Grafana Cloud Synthetic Monitoring service.

MetalLB Controller

Docker Hardened Image

MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.

docker/ucp-auth

Docker, Inc.

Please refer to the docker/ucp image for more information

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

Vertical Pod Autoscaler Admission Controller

Docker Hardened Image

Admission webhook controller for Kubernetes Vertical Pod Autoscaler that sets resource requests on new pods.

AWS SigV4 Proxy

Docker Hardened Image

This project signs and proxies HTTP requests with Sigv4

Vertical Pod Autoscaler Updater

Docker Hardened Image

Monitors the VPA resources and compares current Pod resource requests with the recommendations, evicting and updating pod resources accordingly.

APISIX Ingress Controller

Docker Hardened Image

Controller to run the APISIX Gateway as a Kubernetes Ingress.

amazon-k8s-cni

Docker Hardened Image

Networking plugin for pod networking in Kubernetes using Elastic Network Interfaces on AWS.

Calico CSI

Docker Hardened Image

Calico CSI driver for secure connections from Kubernetes pods to local daemons.

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network

socat

Docker Hardened Image

Multipurpose relay for binary protocols

amazon-k8s-cni-init

Docker Hardened Image

Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

Configurable HTTP Proxy

Docker Hardened Image

node-http-proxy plus a REST API for dynamic JupyterHub routing.

WBITT Network Multitool

Docker Hardened Image

A multi-arch multitool for container and network testing and troubleshooting. Includes a comprehensive set of networking utilities and a minimal nginx web server for easy access and testing. The -extra flavor includes additional tools for advanced networking, database connectivity, and security testing.

Multus Dynamic Networks Controller

Docker Hardened Image

A Kubernetes controller granting the ability to plug/unplug network interfaces to/from running pods.

Emissary-Ingress

Docker Hardened Image

Emissary-ingress is an open-source, developer-centric, Kubernetes-native API gateway built on Envoy Proxy.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

Varnish Cache

Docker Hardened Image

Varnish Cache is a high-performance HTTP accelerator and caching reverse proxy designed to speed up web applications by caching content in memory and serving it at very high throughput.