kubernetes-pause

Docker Hardened Image

kubernetes-pause is the minimal Kubernetes infrastructure container used to hold a pod's shared namespaces.

CDI API Server

Docker Hardened Image

CDI API Server provides a Kubernetes API extension for managing virtual machine disk image imports in KubeVirt

Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network

Dapr Injector

Docker Hardened Image

Kubernetes admission controller that automatically injects the Dapr sidecar container into pods, enabling Dapr capabilities for applications.

K8ssandra Cass Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Apache Cassandra clusters. Handles provisioning, scaling, rolling restarts, upgrades, and failure remediation for production-grade Cassandra workloads in Kubernetes environments.

Azure Service Operator

Docker Hardened Image

Azure Service Operator allows you to create Azure resources using kubectl.

Velero Plugin for GCP

Docker Hardened Image

Plugin to support running Velero on GCP.

Fetch MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to fetch and convert web content for usage by LLMs. This server enables LLMs to retrieve and process content from web pages, converting HTML to markdown for easier consumption.

ClickHouse Keeper

Docker Hardened Image

ClickHouse Keeper is a ZooKeeper-compatible coordination service for ClickHouse cluster replication and distributed DDL.

amazon-k8s-cni-init

Docker Hardened Image

Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.

CDI Upload Proxy

Docker Hardened Image

CDI Upload Proxy forwards upload requests to the CDI upload server for virtual machine disk images

Kyverno Reports Server

Docker Hardened Image

Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.

Dapr Operator

Docker Hardened Image

Kubernetes operator that manages Dapr component Custom Resources (state stores, pub/sub, bindings, etc.) and provides validation webhooks for component configurations.

HTTP Echo

Docker Hardened Image

A lightweight Go web server that serves provided content as an HTML page, ideal for demos and testing.

Connaisseur

Docker Hardened Image

A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.

AWS Node Termination Handler

Docker Hardened Image

Gracefully handles EC2 instance termination events in Kubernetes by cordoning and draining nodes before shutdown, supporting spot interruptions, scheduled maintenance, and ASG scale-in events.

Data Prepper

Docker Hardened Image

Server-side data collector for trace, log, and metric pipelines that filter, enrich, transform, and aggregate observability data for OpenSearch.

Velero Plugin for Azure

Docker Hardened Image

Plugin to support running Velero on Azure.

Dapr Scheduler

Docker Hardened Image

A Dapr control-plane service that manages persistent job scheduling, reminders, and timers for distributed applications.

Open Cluster Management Addon Manager

Docker Hardened Image

Runs on the hub cluster and configures the installation of addon agents for each managed cluster.

Dapr Sentry

Docker Hardened Image

Dapr Sentry certificate authority that issues mTLS certificates for secure communication between Dapr sidecars and control plane components.

Apigee Edge Microgateway

Docker Hardened Image

Apigee Edge Microgateway is a secure, HTTP-based message processor for APIs.

Gitea

Docker Hardened Image

Gitea is a self-hosted, all-in-one software development platform that provides Git repository hosting, code review, issue tracking, a package registry, and CI/CD through Gitea Actions.

Multus Dynamic Networks Controller

Docker Hardened Image

A Kubernetes controller granting the ability to plug/unplug network interfaces to/from running pods.

Apache Superset

Docker Hardened Image

Apache Superset is a modern data exploration and visualization platform.

Placement

Docker Hardened Image

A Kubernetes controller that makes placement decisions for workloads across managed clusters based on Placement APIs.

Emissary-Ingress

Docker Hardened Image

Emissary-ingress is an open-source, developer-centric, Kubernetes-native API gateway built on Envoy Proxy.

WBITT Network Multitool

Docker Hardened Image

A multi-arch multitool for container and network testing and troubleshooting. Includes a comprehensive set of networking utilities and a minimal nginx web server for easy access and testing. The -extra flavor includes additional tools for advanced networking, database connectivity, and security testing.

Dapr Placement Service

Docker Hardened Image

Kubernetes control plane service that manages actor placement using a consistent hash ring, enabling distributed actor instances across the cluster with automatic rebalancing.