Contour

Docker Hardened Image

Contour is a Kubernetes ingress controller using Envoy proxy to provide dynamic configuration updates and high performance load balancing. It supports Ingress, HTTPProxy, and Gateway API.

Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

K8ssandra Operator

Docker Hardened Image

Kubernetes operator for managing multi-cluster Apache Cassandra deployments with K8ssandra. Provides automated lifecycle management, backup/restore, and monitoring capabilities.

Virt Export Proxy

Docker Hardened Image

Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

Kubernetes Controller Manager (kube-controller-manager)

Docker Hardened Image

Runs core control loops in the Kubernetes control plane. kube-controller-manager runs controller processes that regulate the state of the cluster and perform routine tasks.

Etcd

Docker Hardened Image

Etcd is a strongly consistent, distributed key-value store that provides reliable data storage

Grist

Docker Hardened Image

Grist relational spreadsheet

Trivy Operator Helm chart

Docker Hardened Image

Kubernetes-native security toolkit that leverages Trivy to continuously scan your Kubernetes cluster for security issues.

Argo CD Image Updater Helm chart

Docker Hardened Image

A tool to automatically update container images of Kubernetes workloads managed by Argo CD.

Reloader

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

Kyverno Helm chart

Docker Hardened Image

Kyverno is a Kubernetes Native Policy Management engine.

Grafana Image Renderer

Docker Hardened Image

Headless browser service for rendering Grafana panels and dashboards as PNG images and PDF documents using Chromium.

Prometheus Pushgateway

Docker Hardened Image

A push gateway for Prometheus that accepts metrics from ephemeral or batch jobs and exposes them for scraping by Prometheus.

Cassandra Reaper

Docker Hardened Image

Cassandra Reaper is a centralized, stateful, highly available tool for running Apache Cassandra repairs against single or multi-site clusters.

Ceph CSI

Docker Hardened Image

Container Storage Interface driver for Ceph-backed RBD, CephFS, NFS, and NVMe-oF workloads on Kubernetes.

Azure Functions (Node.js)

Docker Hardened Image

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

Perl

Docker Hardened Image

Perl is a high-level, general-purpose, interpreted, dynamic programming language known for its text processing capabilities and extensive CPAN ecosystem.

Elixir

Docker Hardened Image

Elixir is a dynamic, functional language built on the Erlang VM (BEAM) for building scalable, fault-tolerant applications.

AWS EFS CSI Driver

Docker Hardened Image

The AWS EFS CSI driver provides Container Storage Interface (CSI) support for Amazon EFS file systems in Kubernetes clusters. It enables dynamic and static provisioning of EFS volumes.

k6

Docker Hardened Image

Grafana k6 is a modern load testing tool using Go and JavaScript for performance testing

LiteLLM

Docker Hardened Image

LiteLLM is a universal LLM API gateway that provides OpenAI-compatible APIs for 100+ LLM providers including Bedrock, Azure, OpenAI, Anthropic, Vertex AI, and more.

Apache Druid

Docker Hardened Image

Apache Druid is a high performance real-time analytics database designed for workflows where fast queries and ingest really matter.

Karpenter

Docker Hardened Image

karpenter is an efficient node manager for kubernetes clusters

kube-vip

Docker Hardened Image

Virtual IP and load balancer for Kubernetes

Harbor Registry

Docker Hardened Image

Docker Distribution registry for storing and distributing container images within Harbor

OpenCost

Docker Hardened Image

OpenCost is an open source cost monitoring tool for Kubernetes and cloud spend

Prometheus Blackbox Exporter

Docker Hardened Image

Prometheus exporter for probing network endpoints via HTTP, HTTPS, DNS, TCP, ICMP, and gRPC.

Docker

Docker Hardened Image

The Docker CLI is the official command-line interface for Docker. It provides commands to build, run, and manage Docker containers and images.