Unleash

Docker Hardened Image

Unleash is an open-source feature flag management platform.

Percona XtraBackup

Docker Hardened Image

Percona XtraBackup is an open-source hot backup utility for MySQL that performs non-blocking backups for InnoDB, XtraDB, and MyISAM databases.

Vault CSI Provider

Docker Hardened Image

vault-csi-provider is HashiCorp's official Kubernetes integration that securely mounts Vault secrets as files in pod containers using the Container Storage Interface, enabling applications to access centralized secrets without code changes or embedded credentials.

DataHub MCE Consumer

Docker Hardened Image

The DataHub MCE Consumer is a Kafka consumer service that processes MetadataChangeProposal events from upstream sources (ingestion CLI, actions framework) and applies them to DataHub's metadata storage layer via the GMS API, writing failures back to the FailedMetadataChangeProposal topic for retry.

GitLab Runner Helper

Docker Hardened Image

GitLab Runner Helper handles git operations, artifact upload/download, and cache management for GitLab CI/CD jobs.

CloudnativePG Ba Plugin

Docker Hardened Image

CloudnativePG Barman Cloud Plugin is a plugin for CloudnativePG for backing up and restoring Kubernetes Postgres clusters

DataHub Frontend

Docker Hardened Image

The Play Framework web UI for DataHub, the open-source metadata platform for data discovery, observability, and governance.

trust-manager

Docker Hardened Image

cert-manager trust-manager manages trust bundles in Kubernetes and OpenShift clusters

Cilium Hubble Proto

Docker Hardened Image

Protocol buffer definitions for Hubble, the networking and security observability platform for Cilium

Liquibase

Docker Hardened Image

Liquibase is a database schema change management solution that enables you to revise and release database changes faster and safer from development to production.

Hubble UI Backend

Docker Hardened Image

Backend API server for Cilium Hubble UI

K8ssandra Medusa

Docker Hardened Image

Apache Cassandra backup and restore tool

OpenEBS LVM LocalPV Driver

Docker Hardened Image

OpenEBS LVM LocalPV Driver is a Kubernetes CSI plugin that dynamically provisions persistent volumes backed by LVM2 (Logical Volume Manager), providing local storage where the device, volume, and application are on the same host.

Netdata

Docker Hardened Image

Real-time performance monitoring for systems and applications with zero configuration.

Jenkins Agent

Docker Hardened Image

Jenkins Agent is a base image for Docker that includes Java and the Jenkins agent executable (agent.jar). This executable is an instance of the Jenkins Remoting library and enables distributed build capabilities for Jenkins controllers.

Terraform

Docker Hardened Image

Terraform enables you to safely and predictably create, change, and improve infrastructure. It codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

Gitleaks

Docker Hardened Image

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Written in Go.

APISIX

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

Kustomize

Docker Hardened Image

Kustomize lets you customize raw, template-free YAML files for Kubernetes configurations.

A Prometheus exporter that receives access logs from nginx through the syslog protocol and converts them into metrics.

JupyterHub K8s Hub

Docker Hardened Image

JupyterHub hub component for Zero to JupyterHub on Kubernetes, with Kubespawner and authenticators.

Polaris

Docker Hardened Image

Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.

Certbot

Docker Hardened Image

EFF's ACME client for obtaining and renewing TLS certificates from Let's Encrypt and any ACME-compatible CA.

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

Gitea

Docker Hardened Image

Gitea is a self-hosted, all-in-one software development platform that provides Git repository hosting, code review, issue tracking, a package registry, and CI/CD through Gitea Actions.

Prometheus Adapter

Docker Hardened Image

Prometheus Adapter implements the custom.metrics.k8s.io and external.metrics.k8s.io APIs for Kubernetes HPA and VPA, exposing metrics from Prometheus.

Telegraf

Docker Hardened Image

Telegraf is a plugin-driven server agent for collecting and reporting metrics.

NATS Server Config Reloader

Docker Hardened Image

A sidecar utility that watches for NATS configuration file changes and triggers server reloads.

MySQL Server Exporter

Docker Hardened Image

A Prometheus exporter for MySQL Server (mysqld_exporter) exposing server status and performance metrics.

Azure Metrics Exporter

Docker Hardened Image

Azure Monitor metrics exporter for Prometheus