SPIFFE SPIRE Server

Docker Hardened Image

Central SPIRE control plane that issues and manages SPIFFE workload identities.

MariaDB

Docker Hardened Image

MariaDB was designed as a drop-in replacement for MySQL® with more features, new storage engines, fewer bugs, and better performance.

Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

Virt API

Docker Hardened Image

Virt API provides the Kubernetes API extension for managing virtual machines in KubeVirt

Source Controller

Docker Hardened Image

Flux CD component that acquires artifacts from external sources such as Git repositories, Helm repositories, and OCI registries, making them available to other Flux controllers.

Kubeflow Pipelines - Frontend

Docker Hardened Image

The Kubeflow Pipelines provides the UI of the Kubeflow Pipeline ecosystem.

Virt Handler

Docker Hardened Image

Virt Handler manages virtual machine processes on each node in a KubeVirt cluster

SPIFFE SPIRE Agent

Docker Hardened Image

Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.

Uptime Kuma

Docker Hardened Image

Uptime Kuma is a open-source, self-hosted monitoring tool.

Calico Node

Docker Hardened Image

Calico's per-host DaemonSet container image. Provides CNI networking and policy for Kubernetes.

Istio Pilot

Docker Hardened Image

Istio control plane component that configures proxies and handles service discovery

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

Scalable datastore for metrics, events, and real-time analytics

Grafana Tempo

Docker Hardened Image

Grafana Tempo is an open source, easy-to-use, and high-scale distributed tracing backend.

Virt Export Server

Docker Hardened Image

Virt Export Server serves virtual machine volume exports in KubeVirt

Reloader

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

Contour

Docker Hardened Image

Contour is a Kubernetes ingress controller using Envoy proxy to provide dynamic configuration updates and high performance load balancing. It supports Ingress, HTTPProxy, and Gateway API.

kube-rbac-proxy

Docker Hardened Image

a small HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using SubjectAccessReview.

Istioctl

Docker Hardened Image

Istioctl image for managing Istio deployments

Virt Operator

Docker Hardened Image

Virt Operator deploys and manages the KubeVirt virtualization infrastructure in Kubernetes

Helm Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Helm charts declared as HelmRelease resources in Kubernetes, enabling GitOps-driven Helm deployments.

Cilium Envoy

Docker Hardened Image

Envoy proxy for Cilium with minimal Envoy extensions and Cilium policy enforcement filters.

Metrics Server

Docker Hardened Image

Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines. It collects resource metrics from Kubelets and exposes them in Kubernetes apiserver through Metrics API for use by Horizontal Pod Autoscaler and Vertical Pod Autoscaler.

kube-state-metrics

Docker Hardened Image

an add-on agent to generate and expose cluster-level metrics

Argo Events

Docker Hardened Image

Argo Events is an event-driven Workflow Automation Framework

Karpenter

Docker Hardened Image

karpenter is an efficient node manager for kubernetes clusters

Kustomize Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Kustomize-based manifests declared as Kustomization resources in Kubernetes, enabling GitOps-driven continuous delivery.

Docker

Docker Hardened Image

The Docker CLI is the official command-line interface for Docker. It provides commands to build, run, and manage Docker containers and images.

Virt Export Proxy

Docker Hardened Image

Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt