Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

k8ssandra-system-logger

Docker Hardened Image

k8ssandra-system-logger packages Vector (vectordotdev/vector) as a small sidecar image that tails Cassandra system logs and writes them to stdout. It is designed to run as a nonroot sidecar alongside Cassandra to surface /var/log/cassandra/*.log to container stdout for collection by cluster logging agents or centralized logging systems.

Jaeger Query

Docker Hardened Image

Jaeger Query is the Jaeger v2 distributed-tracing query service: it serves the Jaeger UI and the HTTP/gRPC query API for retrieving traces from a storage backend.

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

OpenSearch Dashboards

Docker Hardened Image

OpenSearch Dashboards is a data visualization and user interface for OpenSearch

OpenCost UI

Docker Hardened Image

Web-based UI for OpenCost Kubernetes cost monitoring

Playwright

Docker Hardened Image

End-to-end browser automation and testing framework with bundled Chromium-compatible, Firefox, and WebKit browsers

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

ActiveMQ Artemis

Docker Hardened Image

Apache ActiveMQ Artemis is an open source project to build a multi-protocol, embeddable, very high performance, clustered, asynchronous messaging system.

Valkey Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Valkey clusters. Handles provisioning, scaling, upgrades, and failure remediation for Valkey workloads running on Kubernetes.

AWS Node Termination Handler

Docker Hardened Image

Gracefully handles EC2 instance termination events in Kubernetes by cordoning and draining nodes before shutdown, supporting spot interruptions, scheduled maintenance, and ASG scale-in events.

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

Git-sync

Docker Hardened Image

git-sync is a sidecar that pulls a git repository into a local directory, keeping it synced to a remote.

Distribution Registry

Docker Hardened Image

The toolkit to pack, ship, store, and deliver container content

CDI Operator

Docker Hardened Image

CDI Operator deploys and manages the Containerized Data Importer infrastructure components in Kubernetes

Hatchet Lite

Docker Hardened Image

An orchestration engine for background tasks, AI agents, and durable workflows

JupyterHub K8s Singleuser Sample

Docker Hardened Image

A minimal JupyterLab single-user server image for JupyterHub on Kubernetes.

KServe Controller

Docker Hardened Image

A Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks.

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

iojs

Docker Official Image

DEPRECATED; use "node" instead

julia

Docker Official Image

Julia is a high-level, high-performance dynamic programming language for technical computing.

CDI Controller

Docker Hardened Image

CDI Controller manages the lifecycle of import, upload, and clone operations for virtual machine disk images

AWS Private CA Issuer

Docker Hardened Image

AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.

Calico CSI

Docker Hardened Image

Calico CSI driver for secure connections from Kubernetes pods to local daemons.

API Declarative CLI (ADC)

Docker Hardened Image

ADC is a command line utility that interfaces with API7 Enterprise and Apache APISIX Admin APIs.

nginx/nginx-ingress

NGINX Inc.

NGINX and NGINX Plus Ingress Controllers for Kubernetes

Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

drbd-reactor

Docker Hardened Image

A user-space daemon that monitors and manages DRBD resources

VersityGW

Docker Hardened Image

VersityGW is a high-performance S3 translation service.