OpenTelemetry Target Allocator

Docker Hardened Image

The Target Allocator (TA) is an optional component of the OpenTelemetry Operator that discovers Prometheus targets and shards them across a fleet of OpenTelemetry Collector instances. It provides HTTP endpoints that Collectors use to fetch their assigned scrape targets (e.g. /jobs, /jobs/{job}/targets, /scrape_configs) and supports config-file and CR-based discovery.

Grafana Operator

Docker Hardened Image

A Kubernetes operator for managing Grafana instances, dashboards, and datasources declaratively.

Confluent Platform ZooKeeper

Docker Hardened Image

Apache ZooKeeper packaged for Confluent Platform, configured through ZOOKEEPER_* environment variables by the Confluent container launch scripts.

kong/kong-gateway

Kong Inc.

Kong Gateway Enterprise - The world’s most popular API gateway.

docker/dockerfile

Docker, Inc.

Official Dockerfile frontend images that enable building Dockerfiles with BuildKit

kubernetes-pause

Docker Hardened Image

kubernetes-pause is the minimal Kubernetes infrastructure container used to hold a pod's shared namespaces.

Piraeus CSI NFS Server

Docker Hardened Image

NFS server component for LINSTOR CSI that enables ReadWriteMany (RWX) volume access in Kubernetes using DRBD Reactor for high availability.

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

bonita

Docker Official Image

Bonita is an open-source business process management and workflow suite

cert-manager-istio-csr

Docker Hardened Image

Certificate signing request agent for integrating cert-manager with Istio

cimg/node

CircleCI

The CircleCI Node.js Docker Convenience Image.

Grafana Rollout Operator

Docker Hardened Image

A Kubernetes operator for coordinating the rollout of Grafana pods between different StatefulSets

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

open-liberty

Docker Official Image

Open Liberty multi-architecture images based on Ubuntu

monica

Docker Official Image

Monica – the Personal Relationship Manager.

ibm-semeru-runtimes

Docker Official Image

IBM Semeru Runtimes Official Images for OpenJDK and Eclipse OpenJ9 binaries.

k8ssandra-system-logger

Docker Hardened Image

k8ssandra-system-logger packages Vector (vectordotdev/vector) as a small sidecar image that tails Cassandra system logs and writes them to stdout. It is designed to run as a nonroot sidecar alongside Cassandra to surface /var/log/cassandra/*.log to container stdout for collection by cluster logging agents or centralized logging systems.

Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

fluentd

Docker Official Image

Fluentd is an open source data collector for unified logging layer

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

VersityGW

Docker Hardened Image

VersityGW is a high-performance S3 translation service.

API Declarative CLI (ADC)

Docker Hardened Image

ADC is a command line utility that interfaces with API7 Enterprise and Apache APISIX Admin APIs.

Google Cloud CLI

Docker Hardened Image

The Google Cloud CLI (gcloud, bq, gsutil) for managing Google Cloud Platform resources. The -emulators flavor additionally bundles Google's local service emulators for Cloud Datastore, Cloud Firestore, Pub/Sub, Cloud Bigtable, and Cloud Spanner (linux/amd64 only), for developing and testing against Google Cloud APIs entirely offline.

AWS SigV4 Proxy

Docker Hardened Image

This project signs and proxies HTTP requests with Sigv4

OpenCost UI

Docker Hardened Image

Web-based UI for OpenCost Kubernetes cost monitoring

Apache NiFi

Docker Hardened Image

A data integration and workflow automation tool that supports powerful and scalable directed graphs of data routing, transformation, and mediation logic.

KServe Controller

Docker Hardened Image

A Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks.