Handshake service for kernel TLS consumers

NGINX Ingress Controller Helm chart

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

Varnish Cache

Docker Hardened Image

Varnish Cache is a high-performance HTTP accelerator and caching reverse proxy designed to speed up web applications by caching content in memory and serving it at very high throughput.

Istio Gateway Helm chart

Docker Hardened Image

Helm chart for deploying the Istio Gateway.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

Calico Goldmane

Docker Hardened Image

Calico flow aggregation service for network flow telemetry.

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Calico Typha

Docker Hardened Image

Calico fan-out proxy that scales access to the Calico datastore for large clusters.

wait-for-it

Docker Hardened Image

A pure bash script to test and wait on the availability of a TCP host and port. Useful for synchronizing the spin-up of interdependent services in Docker Compose.

Calico Whisker Backend

Docker Hardened Image

Backend API service for the Calico Whisker network flow visualization UI.

Calico Pod2Daemon FlexVol

Docker Hardened Image

Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.

Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

Tailscale Operator Helm chart

Docker Hardened Image

Helm chart for the Tailscale Kubernetes Operator, which manages Tailscale resources including ingress, egress, subnet routers, and proxies within a cluster.

Tailscale Kubernetes Operator

Docker Hardened Image

Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.

Istio CNI Helm chart

Docker Hardened Image

Helm chart for deploying the Istio CNI plugin.

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

Cilium Hubble Export to Stdout

Docker Hardened Image

Streams Hubble network flow export logs to stdout for log collection

Calico Webhooks

Docker Hardened Image

Validating admission webhook server for Calico tiered RBAC enforcement on policy resources.

Stunnel

Docker Hardened Image

stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.