Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

Rancher Fleet Agent

Forklift OVA Proxy

Docker Hardened Image

Forklift OVA Proxy fronts the OVA provider inventory service, reverse proxying appliance requests from the Forklift console to the provider server inside the cluster.

Datadog Cluster Agent

Docker Hardened Image

Datadog Cluster Agent runs centralized Kubernetes cluster-level checks, serves a custom-metrics provider for HPA, and acts as a proxy between node agents and the Kubernetes API.

Secrets Store CSI Driver CRDs

Docker Hardened Image

Packages the Secrets Store CSI Driver CustomResourceDefinitions together with kubectl, so a cluster can register SecretProviderClass and SecretProviderClassPodStatus before the driver itself is deployed.

Teleport

Docker Hardened Image

Teleport is an identity-aware access platform that provides SSO, short-lived certificates, MFA and session recording for SSH, Kubernetes, databases, web apps and Windows desktops.

cloudflared

Docker Hardened Image

Cloudflare Tunnel client that connects origin services to the Cloudflare network without opening inbound ports.

k6-operator

Docker Hardened Image

An operator for running distributed k6 tests.

CSI-Addons Sidecar

Docker Hardened Image

csi-addons-k8s-sidecar is the Kubernetes CSI-Addons sidecar that runs alongside a CSI driver to expose advanced storage operations such as reclaim space, network fence, encryption key rotation and volume replication to the CSI-Addons controller.

nuxeo

Docker Official Image

DEPRECATED; contact Nuxeo for support/updates

emqx

Docker Official Image

DEPRECATED; The most scalable open-source MQTT broker for IoT, IIoT, connected vehicles, and more.

KServe LocalModelNode Agent

Docker Hardened Image

Enables local model node management and caching.

GitHub Actions Runner

Docker Hardened Image

Self-hosted runner that listens for and executes GitHub Actions workflow jobs.

Centrifugo

Docker Hardened Image

Centrifugo is a scalable real-time messaging server that adds WebSocket, SSE, and HTTP-streaming pub/sub to any application backend.

Forklift Must-Gather

Docker Hardened Image

Forklift must-gather is the diagnostics collector for the Forklift VM migration toolkit. It gathers Forklift and KubeVirt custom resources, pod logs, and optional metrics into a support archive via oc adm must-gather.

StackHawk MCP Server

Docker Hardened Image

A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the StackHawk application security testing platform.

MongoDB MCP Server

Docker Hardened Image

A Model Context Protocol server for MongoDB that enables querying and schema discovery via MCP.

Calico Pod2Daemon FlexVol

Docker Hardened Image

Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.

Forklift Hyper-V Provider Server

Docker Hardened Image

Forklift Hyper-V Provider Server validates exported Hyper-V disk paths on an SMB share for Forklift migration plans.

NGINX LDAP Auth

Docker Hardened Image

LDAP authentication daemon for the NGINX auth_request module, supporting OpenLDAP and Active Directory.

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

newrelic/newrelic-prometheus-configurator

New Relic

New Relic Prometheus Configurator Image

Beat Exporter

Docker Hardened Image

Prometheus exporter for Elastic Beats stats endpoints.

hello-seattle

Docker Official Image

Hello from DockerCon 2016 (Seattle)!

KServe LocalModel Controller

Docker Hardened Image

Enables local model caching and management.