Calico Kube Controllers

Docker Hardened Image

Calico controller manager that reconciles IPAM, network policy, and Calico CRD state.

LocalStack

Docker Hardened Image

LocalStack is a cloud software development framework to develop and test your AWS applications locally.

Cilium Envoy

Docker Hardened Image

Envoy proxy for Cilium with minimal Envoy extensions and Cilium policy enforcement filters.

Grist

Docker Hardened Image

Grist relational spreadsheet

AWS Mountpoint S3 CSI Driver

Docker Hardened Image

The AWS Mountpoint for Amazon S3 CSI driver provides Container Storage Interface (CSI) support for mounting S3 buckets as storage volumes in Kubernetes clusters using Mountpoint for Amazon S3.

Notification Controller

Docker Hardened Image

Flux CD component that dispatches events to external notification providers and exposes a webhook receiver endpoint for triggering reconciliation from external systems.

Ceph (Rook)

Docker Hardened Image

Ceph is a distributed storage system providing object, block, and file storage interfaces. This image contains Ceph daemon binaries for use with the Rook Kubernetes operator for cloud-native storage orchestration.

Cilium Clustermesh API Server

Docker Hardened Image

Cilium Clustermesh API Server is a load balancing API for Cilium clusters

kube-rbac-proxy

Docker Hardened Image

a small HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using SubjectAccessReview.

Kustomize Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Kustomize-based manifests declared as Kustomization resources in Kubernetes, enabling GitOps-driven continuous delivery.

Helm Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Helm charts declared as HelmRelease resources in Kubernetes, enabling GitOps-driven Helm deployments.

Metrics Server

Docker Hardened Image

Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines. It collects resource metrics from Kubelets and exposes them in Kubernetes apiserver through Metrics API for use by Horizontal Pod Autoscaler and Vertical Pod Autoscaler.

Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

Langfuse Worker

Docker Hardened Image

Background job processor for the Langfuse LLM engineering platform, handling evaluations, ingestion, batch exports, and data retention.

Docker Sandboxes Agent Templates

Docker Hardened Image

Docker Sandboxes Agent Templates (SBX) images for AI coding agents

Scalable datastore for metrics, events, and real-time analytics

SPIFFE SPIRE Agent

Docker Hardened Image

Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.

SPIFFE SPIRE Server

Docker Hardened Image

Central SPIRE control plane that issues and manages SPIFFE workload identities.

clamav

Docker Hardened Image

ClamAV is an open source (GPLv2) anti-virus toolkit, designed especially for e-mail scanning on mail gateways.

Grafana Tempo

Docker Hardened Image

Grafana Tempo is an open source, easy-to-use, and high-scale distributed tracing backend.

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

Virt Controller

Docker Hardened Image

Virt Controller manages the lifecycle of virtual machines in KubeVirt

Uptime Kuma

Docker Hardened Image

Uptime Kuma is a open-source, self-hosted monitoring tool.

Virt Export Server

Docker Hardened Image

Virt Export Server serves virtual machine volume exports in KubeVirt

Virt Operator

Docker Hardened Image

Virt Operator deploys and manages the KubeVirt virtualization infrastructure in Kubernetes

Flyway

Docker Hardened Image

Flyway is an open-source database migration tool that simplifies the evolution of your database schema.

MediaWiki

Docker Hardened Image

Free and open-source wiki software (the software behind Wikipedia).

Harbor DB

Docker Hardened Image

Harbor DB is the PostgreSQL database component used by the Harbor container registry for persistent storage of metadata, users, projects, and policies. It ships Harbor-specific initialization and upgrade scripts on top of PostgreSQL 14 and 15.

Istio Pilot

Docker Hardened Image

Istio control plane component that configures proxies and handles service discovery

SapMachine

Docker Hardened Image

SapMachine is SAP's downstream distribution of OpenJDK providing production-ready JDK and JRE builds. This image packages the SapMachine JDK for use in containers with JAVA_HOME set to /opt/java/openjdk and common Java CLI tools available on PATH.