Cilium Clustermesh API Server

Docker Hardened Image

Cilium Clustermesh API Server is a load balancing API for Cilium clusters

Fluent Bit

Docker Hardened Image

Fluent Bit is an open source data collector for unified logging layer.

Grafana Loki Canary

Docker Hardened Image

Loki Canary - Test tool for Grafana Loki installations

Calico Kube Controllers

Docker Hardened Image

Calico controller manager that reconciles IPAM, network policy, and Calico CRD state.

clamav

Docker Hardened Image

ClamAV is an open source (GPLv2) anti-virus toolkit, designed especially for e-mail scanning on mail gateways.

Dart

Docker Hardened Image

Dart is a client-optimized programming language for fast apps on any platform.

Kyverno Init

Docker Hardened Image

Kyverno is a component that continuously monitors and enforces policies on existing resources in a kubernetes cluster, ensuring ongoing compliance.

MariaDB

Docker Hardened Image

MariaDB was designed as a drop-in replacement for MySQL® with more features, new storage engines, fewer bugs, and better performance.

Flyway

Docker Hardened Image

Flyway is an open-source database migration tool that simplifies the evolution of your database schema.

SPIFFE SPIRE Server

Docker Hardened Image

Central SPIRE control plane that issues and manages SPIFFE workload identities.

Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

Virt API

Docker Hardened Image

Virt API provides the Kubernetes API extension for managing virtual machines in KubeVirt

Source Controller

Docker Hardened Image

Flux CD component that acquires artifacts from external sources such as Git repositories, Helm repositories, and OCI registries, making them available to other Flux controllers.

Kubeflow Pipelines - Frontend

Docker Hardened Image

The Kubeflow Pipelines provides the UI of the Kubeflow Pipeline ecosystem.

Virt Handler

Docker Hardened Image

Virt Handler manages virtual machine processes on each node in a KubeVirt cluster

SPIFFE SPIRE Agent

Docker Hardened Image

Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.

Uptime Kuma

Docker Hardened Image

Uptime Kuma is a open-source, self-hosted monitoring tool.

Calico Node

Docker Hardened Image

Calico's per-host DaemonSet container image. Provides CNI networking and policy for Kubernetes.

Istio Pilot

Docker Hardened Image

Istio control plane component that configures proxies and handles service discovery

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

Scalable datastore for metrics, events, and real-time analytics

Grafana Tempo

Docker Hardened Image

Grafana Tempo is an open source, easy-to-use, and high-scale distributed tracing backend.

Virt Export Server

Docker Hardened Image

Virt Export Server serves virtual machine volume exports in KubeVirt

Reloader

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

External DNS Helm chart

Docker Hardened Image

ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.

Contour

Docker Hardened Image

Contour is a Kubernetes ingress controller using Envoy proxy to provide dynamic configuration updates and high performance load balancing. It supports Ingress, HTTPProxy, and Gateway API.

kube-rbac-proxy

Docker Hardened Image

a small HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using SubjectAccessReview.

Istioctl

Docker Hardened Image

Istioctl image for managing Istio deployments

Virt Operator

Docker Hardened Image

Virt Operator deploys and manages the KubeVirt virtualization infrastructure in Kubernetes