CoreDNS

Docker Hardened Image

CoreDNS is a DNS server that chains plugins. It is written in Go and is designed to be fast and flexible. CoreDNS is used in cloud-native environments and is the default DNS server in Kubernetes.

Calico CNI

Docker Hardened Image

Calico CNI plugin provides networking and network policy for Kubernetes clusters

Envoy Gateway Helm chart

Docker Hardened Image

Envoy Gateway helm chart is an open source project for managing Envoy Proxy as a Kubernetes-based application gateway.

Cilium Hubble Relay

Docker Hardened Image

Relay server for aggregating and exposing Hubble observability data

grafana/synthetic-monitoring-agent

Grafana Labs

Blackbox Exporter agent which executes checks for the Grafana Cloud Synthetic Monitoring service.

docker/ucp-auth

Docker, Inc.

Please refer to the docker/ucp image for more information

MetalLB Speaker

Docker Hardened Image

MetalLB speaker component announces LoadBalancer services to the network using Layer 2 ARP or BGP routing protocols on bare metal Kubernetes clusters.

Tailscale

Docker Hardened Image

Tailscale lets you securely connect devices and containers without exposing them to the public internet.

Istio Discovery (istiod) Helm chart

Docker Hardened Image

Helm chart for the Istio control plane (istiod) from the Istio project.

NGINX Ingress Controller

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

Istio Base Helm chart

Docker Hardened Image

This chart installs resources shared by all Istio revisions. This includes Istio CRDs.

Istio Ztunnel Helm chart

Docker Hardened Image

The ztunnel component of Istio's ambient mesh

MetalLB Controller

Docker Hardened Image

MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

HAProxy Helm chart

Docker Hardened Image

The Reliable, High Performance TCP/HTTP Load Balancer

Etcd Helm chart

Docker Hardened Image

Etcd is a strongly consistent, distributed key-value store that provides reliable data storage

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

Vertical Pod Autoscaler Admission Controller

Docker Hardened Image

Admission webhook controller for Kubernetes Vertical Pod Autoscaler that sets resource requests on new pods.

Rancher Fleet Agent

Vertical Pod Autoscaler Updater

Docker Hardened Image

Monitors the VPA resources and compares current Pod resource requests with the recommendations, evicting and updating pod resources accordingly.

amazon-k8s-cni

Docker Hardened Image

Networking plugin for pod networking in Kubernetes using Elastic Network Interfaces on AWS.

APISIX Ingress Controller

Docker Hardened Image

Controller to run the APISIX Gateway as a Kubernetes Ingress.

AWS SigV4 Proxy

Docker Hardened Image

This project signs and proxies HTTP requests with Sigv4

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network

hashicorp/tfc-agent

HashiCorp, an IBM Company

Terraform Cloud Agent

amazon/aws-alb-ingress-controller

Amazon Web Services

AWS ALB Ingress Controller

amazon-k8s-cni-init

Docker Hardened Image

Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.