Gatekeeper

Docker Hardened Image

Policy Controller for Kubernetes, built on Open Policy Agent.

Dex Helm chart

Docker Hardened Image

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

APISIX

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

Goldilocks

Docker Hardened Image

A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.

cimg/ruby

CircleCI

The CircleCI Ruby Docker Convenience Image.

notary

Docker Official Image

DEPRECATED; Notary server and signer cooperatively handle signing and distribution

trust-manager

Docker Hardened Image

cert-manager trust-manager manages trust bundles in Kubernetes and OpenShift clusters

A container management platform built for organizations that deploy containers in production.

Kyverno Policy Reporter UI

Docker Hardened Image

The Kyverno Policy Reporter UI watches for PolicyReport Resources and displays information on a web based UI

Kyverno Policy Reporter Helm chart

Docker Hardened Image

Monitoring and observability tool for Kubernetes policy reports

cert-manager-istio-csr

Docker Hardened Image

Certificate signing request agent for integrating cert-manager with Istio

AWS EKS Pod Identity Agent

Docker Hardened Image

The AWS EKS Pod Identity Agent runs on Amazon EKS nodes and exchanges Kubernetes service account tokens for temporary AWS IAM credentials, providing pods with IAM roles without using IRSA or instance profiles.

AWS Private CA Issuer

Docker Hardened Image

AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.

hashicorp/vault

HashiCorp, an IBM Company

Official vault docker images

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Keycloak Helm chart

Docker Hardened Image

Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.

OpenBao

Docker Hardened Image

OpenBao provides a solution to manage, store, and distribute sensitive data, including secrets, certificates, and keys

Rancher Fleet Agent

Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

AWS SigV4 Proxy

Docker Hardened Image

This project signs and proxies HTTP requests with Sigv4

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network

hashicorp/tfc-agent

HashiCorp, an IBM Company

Terraform Cloud Agent

amazon/aws-alb-ingress-controller

Amazon Web Services

AWS ALB Ingress Controller

Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.

Kyverno Reports Server

Docker Hardened Image

Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.

hashicorp/consul-template

HashiCorp, an IBM Company

Consul Template is a template renderer, notifier, and supervisor for HashiCorp Consul and Vault.

Connaisseur

Docker Hardened Image

A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.