Forklift Console Plugin

Docker Hardened Image

OpenShift console dynamic plugin for Forklift, the Migration Toolkit for Virtualization. Adds the migration UI (providers, plans, network and storage mappings) for moving virtual machines from VMware vSphere, oVirt, OpenStack, and OVA to KubeVirt.

Memory MCP Server

Docker Hardened Image

A Model Context Protocol server that provides ephemeral and persistent memory tools for MCP clients.

AWS Provider for Secrets Store CSI Driver

Docker Hardened Image

The AWS provider for the Secrets Store CSI Driver fetches secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store and mounts them into Kubernetes pods as files, supporting both IRSA and EKS Pod Identity authentication.

Headlamp

Docker Hardened Image

Headlamp is a fully-featured, user-friendly and extensible web UI for Kubernetes that runs in-cluster or as a desktop application.

vSphere CSI Syncer

Docker Hardened Image

Metadata syncer for the VMware vSphere CSI driver. Runs alongside the CSI controller and synchronizes volume metadata between Kubernetes and the vSphere Cloud Native Storage (CNS) inventory.

Forklift vSphere Copy Offload Populator

Docker Hardened Image

Forklift vSphere Copy Offload Populator clones VMware source disks directly on storage arrays through vSphere XCOPY, populating Kubernetes PersistentVolumeClaims without host data paths.

Ory Oathkeeper Maester

Docker Hardened Image

Kubernetes controller that watches Ory Oathkeeper Rule custom resources and renders them into the access rules ConfigMap or file that Ory Oathkeeper consumes.

R

Docker Hardened Image

R is a free software environment for statistical computing and graphics.

Envoy Contrib

Docker Hardened Image

Envoy built with the contrib extensions, adding protocol filters such as Postgres, MySQL, Kafka, SIP, and RocketMQ on top of the core high-performance L7 proxy.

Secrets Store CSI Driver CRDs

Docker Hardened Image

Packages the Secrets Store CSI Driver CustomResourceDefinitions together with kubectl, so a cluster can register SecretProviderClass and SecretProviderClassPodStatus before the driver itself is deployed.

Ansible Operator

Docker Hardened Image

Base image for Ansible-based Kubernetes operators built with the Operator SDK, bundling the ansible-operator runtime, ansible-core, ansible-runner and the Kubernetes Python client.

Kyverno Policies Helm chart

Docker Hardened Image

Kubernetes Pod Security Standards implemented as Kyverno policies.

Selenium Hub

Docker Hardened Image

Central coordinator of a Selenium Grid that receives WebDriver session requests from test clients and routes them to registered browser Nodes, enabling parallel and distributed browser automation at scale.

Stunnel

Docker Hardened Image

stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.

ShellCheck

Docker Hardened Image

ShellCheck is a shell script static analysis tool that gives warnings and suggestions for bash/sh shell scripts to point out and clarify syntax issues, semantic problems and subtle caveats, corner cases and pitfalls

NGINX LDAP Auth

Docker Hardened Image

LDAP authentication daemon for the NGINX auth_request module, supporting OpenLDAP and Active Directory.

Drupal Nginx

Docker Hardened Image

Nginx web server preconfigured with the wodby virtual host presets for Drupal, plus WordPress, Laravel, Django, Matomo, and plain PHP.

OpenTelemetry Java Autoinstrumentation

Docker Hardened Image

This is a Java autoinstrumentation agent used by the OpenTelemetry Operator

MongoDB Helm chart

Docker Hardened Image

MongoDB is a source-available cross-platform document-oriented database program.

Forklift CLI Download

Docker Hardened Image

Forklift CLI Download serves the kubectl-mtv command line client binaries for Linux, macOS, and Windows over TLS for the OpenShift console CLI download page.

Trust-Manager Helm chart

Docker Hardened Image

trust-manager manages TLS trust bundles in Kubernetes and OpenShift clusters.

Jaeger ES Index Cleaner

Docker Hardened Image

Jaeger es-index-cleaner deletes Jaeger indices older than a given number of days from Elasticsearch.

GitHub Actions Runner

Docker Hardened Image

Self-hosted runner that listens for and executes GitHub Actions workflow jobs.

Flux Operator

Docker Hardened Image

Kubernetes operator that manages the lifecycle of Flux CD, providing declarative install, upgrade, and configuration of the GitOps toolkit along with a web UI for monitoring the delivery pipelines.

Azure ResourceManager Exporter

Docker Hardened Image

Prometheus exporter for Azure Resource Manager quotas, costs, resource health, IAM, and Defender security metrics.

Milvus etcd

Docker Hardened Image

Bitnami-compatible etcd distribution maintained by the Milvus project as the metadata store for Milvus deployments

Kiali Server Helm chart

Docker Hardened Image

web-based console for observability and configuration validation of the Istio service mesh

Rundeck

Docker Hardened Image

Rundeck is a runbook automation and self-service operations platform for defining jobs and running commands or scripts across nodes over SSH, on schedules or on demand, with access control, logging, and audit.

Jaeger ES Rollover

Docker Hardened Image

Jaeger es-rollover initializes, rolls over and trims the aliased Jaeger indices in an Elasticsearch cluster.

Codecov Gateway

Docker Hardened Image

Codecov Gateway is the HAProxy reverse proxy of a self-hosted Codecov deployment, routing requests to the Codecov API, frontend and object storage.