DataHub Frontend

Docker Hardened Image

The Play Framework web UI for DataHub, the open-source metadata platform for data discovery, observability, and governance.

Gitleaks

Docker Hardened Image

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Written in Go.

Azure Metrics Exporter

Docker Hardened Image

Azure Monitor metrics exporter for Prometheus

NATS Server Config Reloader

Docker Hardened Image

A sidecar utility that watches for NATS configuration file changes and triggers server reloads.

APISIX

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

GitLab Runner Helper

Docker Hardened Image

GitLab Runner Helper handles git operations, artifact upload/download, and cache management for GitLab CI/CD jobs.

Goldilocks

Docker Hardened Image

A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.

Kustomize

Docker Hardened Image

Kustomize lets you customize raw, template-free YAML files for Kubernetes configurations.

Apache NiFi

Docker Hardened Image

A data integration and workflow automation tool that supports powerful and scalable directed graphs of data routing, transformation, and mediation logic.

MetalLB Controller

Docker Hardened Image

MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.

Prometheus Adapter

Docker Hardened Image

Prometheus Adapter implements the custom.metrics.k8s.io and external.metrics.k8s.io APIs for Kubernetes HPA and VPA, exposing metrics from Prometheus.

StatsD Exporter

Docker Hardened Image

A Prometheus exporter that receives StatsD-style metrics and exports them as Prometheus metrics via configurable mapping rules and tagging formats.

JupyterHub

Docker Hardened Image

JupyterHub provides a multi-user server for Jupyter notebooks, with pluggable authentication and spawners.

A Prometheus exporter that receives access logs from nginx through the syslog protocol and converts them into metrics.

AWS EKS Pod Identity Agent

Docker Hardened Image

The AWS EKS Pod Identity Agent runs on Amazon EKS nodes and exchanges Kubernetes service account tokens for temporary AWS IAM credentials, providing pods with IAM roles without using IRSA or instance profiles.

trust-manager

Docker Hardened Image

cert-manager trust-manager manages trust bundles in Kubernetes and OpenShift clusters

Memcached

Docker Hardened Image

Free & open source, high-performance, distributed memory object caching system.

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

Telegraf

Docker Hardened Image

Telegraf is a plugin-driven server agent for collecting and reporting metrics.

Cilium DNS Proxy

Docker Hardened Image

Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.

Kubeflow Pipelines - API Server

Docker Hardened Image

The Kubeflow Pipelines API Server coordinates k8s workflows in the Kubeflow Pipeline ecosystem.

OpenTelemetry Target Allocator

Docker Hardened Image

The Target Allocator (TA) is an optional component of the OpenTelemetry Operator that discovers Prometheus targets and shards them across a fleet of OpenTelemetry Collector instances. It provides HTTP endpoints that Collectors use to fetch their assigned scrape targets (e.g. /jobs, /jobs/{job}/targets, /scrape_configs) and supports config-file and CR-based discovery.

Kyverno Policy Reporter UI

Docker Hardened Image

The Kyverno Policy Reporter UI watches for PolicyReport Resources and displays information on a web based UI

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

Piraeus CSI NFS Server

Docker Hardened Image

NFS server component for LINSTOR CSI that enables ReadWriteMany (RWX) volume access in Kubernetes using DRBD Reactor for high availability.

JupyterHub K8s Hub

Docker Hardened Image

JupyterHub hub component for Zero to JupyterHub on Kubernetes, with Kubespawner and authenticators.

DataHub MCE Consumer

Docker Hardened Image

The DataHub MCE Consumer is a Kafka consumer service that processes MetadataChangeProposal events from upstream sources (ingestion CLI, actions framework) and applies them to DataHub's metadata storage layer via the GMS API, writing failures back to the FailedMetadataChangeProposal topic for retry.

Grafana Operator

Docker Hardened Image

A Kubernetes operator for managing Grafana instances, dashboards, and datasources declaratively.

VictoriaMetrics VMAuth

Docker Hardened Image

VictoriaMetrics VMAuth is an HTTP proxy for authorizing, routing, and load balancing requests to VictoriaMetrics components.

CDI Upload Server

Docker Hardened Image

CDI Upload Server handles the upload of virtual machine disk images into persistent volume claims