victoriametrics/operator

Victoria Metrics Inc

Victoria Metrics kubernetes operator

grafana/alloy

Grafana Labs

Vendor-agnostic OpenTelemetry Collector distribution with programmable pipelines

Socket CLI

Docker Hardened Image

Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.

GitLab Shell

Docker Hardened Image

GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.

plone

Docker Official Image

DEPRECATED. Plone is a free and open source content management system built on top of Zope.

drbd-utils

Docker Hardened Image

DRBD user-space utilities for managing DRBD resources

Cilium startup script

Docker Hardened Image

Cilium startup script

oryd/hydra

Ory Corp

Scalable, security first OAuth 2.0 and OpenID Connect server

Azure Service Operator

Docker Hardened Image

Azure Service Operator allows you to create Azure resources using kubectl.

Nginx Exporter

Docker Hardened Image

Nginx exporter makes it possible to monitor Nginx or Nginx Plus with Prometheus by exposing metrics in Prometheus format.

cimg/ruby

CircleCI

The CircleCI Ruby Docker Convenience Image.

Jaeger Ingester

Docker Hardened Image

Jaeger v2 unified binary preconfigured to ingest spans from Kafka into a storage backend.

backdrop

Docker Official Image

The comprehensive CMS for small to medium sized businesses and non-profits.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.

Emissary-Ingress

Docker Hardened Image

Emissary-ingress is an open-source, developer-centric, Kubernetes-native API gateway built on Envoy Proxy.

Apache Superset

Docker Hardened Image

Apache Superset is a modern data exploration and visualization platform.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

Object Storage Sidecar

Docker Hardened Image

Object storage sidecar that manages bucket lifecycle by coordinating with COSI drivers.

Git-sync

Docker Hardened Image

git-sync is a sidecar that pulls a git repository into a local directory, keeping it synced to a remote.

Linstor Affinity Controller

Docker Hardened Image

Keeps Kubernetes PersistentVolume affinity in sync with LINSTOR volume placement for optimal workload scheduling.

MongoDB Controllers for Kubernetes (MCK)

Docker Hardened Image

A Kubernetes operator that enables users to run MongoDB in Kubernetes

SpiceDB Operator

Docker Hardened Image

SpiceDB Operator manages SpiceDB authorization database instances in Kubernetes via SpiceDBCluster custom resources, handling provisioning, configuration, and version upgrades.

Local Path Provisioner

Docker Hardened Image

Kubernetes controller that dynamically provisions local persistent volumes backed by node-local storage using hostPath or local volume types.

kong/kubernetes-ingress-controller

Kong Inc.

Use Kong for Kubernetes Ingress

Node Problem Detector

Docker Hardened Image

A Kubernetes daemon that detects node-level problems — kernel issues, hardware faults, and runtime failures — and reports them to the API server as Events and NodeConditions.

Fetch MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to fetch and convert web content for usage by LLMs. This server enables LLMs to retrieve and process content from web pages, converting HTML to markdown for easier consumption.