Kibana

Docker Hardened Image

Kibana gives shape to any kind of data — structured and unstructured — indexed in Elasticsearch.

DataHub Actions

Docker Hardened Image

Event-driven framework that reacts to real-time changes in DataHub's metadata graph by polling Kafka topics and invoking pluggable actions (Slack/Teams notifications, doc/tag propagation, executor for UI-triggered ingestion).

Harbor Core

Docker Hardened Image

Harbor Core is the main API server component of Harbor, an open source trusted cloud native registry project that stores, signs, and scans content.

SonarQube

Docker Hardened Image

SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code.

Snapshot Controller

Docker Hardened Image

Kubernetes controller that watches VolumeSnapshot and VolumeSnapshotContent objects and coordinates snapshot operations with CSI drivers.

AWS EBS CSI Driver

Docker Hardened Image

The AWS EBS CSI driver provides Container Storage Interface (CSI) support for Amazon EBS volumes in Kubernetes clusters. It enables dynamic and static provisioning, volume snapshots, and volume resizing.

Argo Rollouts

Docker Hardened Image

Argo Rollouts is a Kubernetes controller and set of CRDs which provide advanced deployment capabilities

CSI Snapshotter

Docker Hardened Image

csi-snapshotter is a Kubernetes CSI sidecar component that manages volume snapshots and restore operations by watching VolumeSnapshot objects and coordinating with CSI drivers.

Azul Platform Prime

Docker Hardened Image

Azul Platform Prime delivers optimizes Java application performance and drives cloud cost efficiency.

CSI Livenessprobe

Docker Hardened Image

livenessprobe is a Kubernetes CSI sidecar component that provides health checking capabilities for CSI drivers by monitoring driver endpoints and reporting liveness/readiness status to Kubernetes.

CSI Attacher

Docker Hardened Image

csi-attacher is a Kubernetes CSI sidecar component that manages volume attachment and detachment operations by watching VolumeAttachment objects and coordinating with CSI drivers.

notation

Docker Hardened Image

Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.

OpenTelemetry Operator

Docker Hardened Image

OpenTelemetry Operator is a Kubernetes operator that manages OpenTelemetry Collector and auto-instrumentation deployments. It provides custom resources for configuring collectors, instrumenting applications, and managing telemetry pipelines in Kubernetes clusters.

Thanos

Docker Hardened Image

Thanos is a highly available metrics system that offers long term storage capabilities.

Descheduler

Docker Hardened Image

Kubernetes descheduler that evicts pods to improve workload placement.

Istio Discovery (istiod) Helm chart

Docker Hardened Image

Helm chart for the Istio control plane (istiod) from the Istio project.

Grafana Loki Helm Test

Docker Hardened Image

A collection of go tests that test if a Loki canary is running correctly.

KServe Storage Initializer

Docker Hardened Image

Downloads model artifacts from various storage backends (S3, GCS, Azure, etc.) before KServe model serving containers start.

Cilium Certgen

Docker Hardened Image

A convenience tool to generate and store certificates for Cilium components, such as Cluster Mesh and Hubble Relay.

MLflow

Docker Hardened Image

MLflow is an open-source platform for managing the machine learning lifecycle: experiment tracking, reproducible runs, model packaging, and deployment. This image provides the mlflow CLI and server runtime packaged as a hardened container for secure production deployments.

VictoriaMetrics VMInsert

Docker Hardened Image

VictoriaMetrics VMInsert is the ingestion component for a VictoriaMetrics cluster.

Tailscale

Docker Hardened Image

Tailscale lets you securely connect devices and containers without exposing them to the public internet.

Piraeus CSI

Docker Hardened Image

CSI (Container Storage Interface) driver for LINSTOR/Piraeus that enables Kubernetes to provision persistent volumes using LINSTOR storage.

Vault Helm chart

Docker Hardened Image

Vault is a tool for securely accessing secrets.

Kubernetes Scheduler (kube-scheduler)

Docker Hardened Image

Schedules pods onto nodes. kube-scheduler watches for newly created pods with no assigned node, and selects a node for them to run on.

Trivy Operator

Docker Hardened Image

Kubernetes-native security toolkit that leverages Trivy to continuously scan your Kubernetes cluster for security issues.

Crane

Docker Hardened Image

Crane is a tool for interacting with remote images and registries. It allows to efficiently inspect, verify and manipulate containers, manifests and image layers as well as checking cryptographic signatures.

VictoriaMetrics VMAgent

Docker Hardened Image

VictoriaMetrics VMAgent is an agent that helps you collect metrics from various sources, relabel and filter the collected metrics and store them in VictoriaMetrics.

Istio Base Helm chart

Docker Hardened Image

This chart installs resources shared by all Istio revisions. This includes Istio CRDs.

Kubectl Argo Rollouts Controller

Docker Hardened Image

CLI and Dashboard for the Argo Rollouts Kubernetes controller