Git

Docker Hardened Image

Distributed version control system for tracking changes in source code

DataHub Ingestion

Docker Hardened Image

DataHub metadata ingestion CLI for emitting metadata from data sources, BI tools, and data warehouses into DataHub.

Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

redmine

Docker Official Image

Redmine is a flexible project management web application written using Ruby on Rails framework

k6

Docker Hardened Image

Grafana k6 is a modern load testing tool using Go and JavaScript for performance testing

Harbor Registry

Docker Hardened Image

Docker Distribution registry for storing and distributing container images within Harbor

Prometheus Pushgateway

Docker Hardened Image

A push gateway for Prometheus that accepts metrics from ephemeral or batch jobs and exposes them for scraping by Prometheus.

DataHub Actions

Docker Hardened Image

Event-driven framework that reacts to real-time changes in DataHub's metadata graph by polling Kafka topics and invoking pluggable actions (Slack/Teams notifications, doc/tag propagation, executor for UI-triggered ingestion).

LiteLLM

Docker Hardened Image

LiteLLM is a universal LLM API gateway that provides OpenAI-compatible APIs for 100+ LLM providers including Bedrock, Azure, OpenAI, Anthropic, Vertex AI, and more.

Reloader

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

Kyverno Readiness Checker

Docker Hardened Image

Kyverno Readiness Checker is a component that checks the readiness of a Kyverno installation

Cilium DNS Proxy

Docker Hardened Image

Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

Apache Druid

Docker Hardened Image

Apache Druid is a high performance real-time analytics database designed for workflows where fast queries and ingest really matter.

Grafana Image Renderer

Docker Hardened Image

Headless browser service for rendering Grafana panels and dashboards as PNG images and PDF documents using Chromium.

Prometheus Blackbox Exporter

Docker Hardened Image

Prometheus exporter for probing network endpoints via HTTP, HTTPS, DNS, TCP, ICMP, and gRPC.

Kubernetes API Server (kube-apiserver)

Docker Hardened Image

Front end for the Kubernetes control plane. kube-apiserver exposes the Kubernetes API over HTTP(S), performs request validation, authentication and authorization, runs admission control, and persists cluster state to an etcd backend.

Perl

Docker Hardened Image

Perl is a high-level, general-purpose, interpreted, dynamic programming language known for its text processing capabilities and extensive CPAN ecosystem.

elixir

Docker Official Image

Elixir is a dynamic, functional language for building scalable and maintainable applications.

LiteLLM Database

Docker Hardened Image

LiteLLM Database is the database-enabled LiteLLM proxy image with Prisma support for persistent PostgreSQL-backed keys, budgets, spend tracking, and gateway configuration.

Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

Jaeger Spark Dependencies

Docker Hardened Image

Spark batch job that analyzes Jaeger tracing data to build service dependency graphs.

OpenCost

Docker Hardened Image

OpenCost is an open source cost monitoring tool for Kubernetes and cloud spend

kube-vip

Docker Hardened Image

Virtual IP and load balancer for Kubernetes

erlang

Docker Official Image

Erlang is a programming language used to build massively scalable systems with high availability.

Karpenter

Docker Hardened Image

karpenter is an efficient node manager for kubernetes clusters

Grist

Docker Hardened Image

Grist relational spreadsheet

Harbor Core

Docker Hardened Image

Harbor Core is the main API server component of Harbor, an open source trusted cloud native registry project that stores, signs, and scans content.

Grype

Docker Hardened Image

Grype is a vulnerability scanner for container images and filesystems. It provides fast and accurate vulnerability detection with support for multiple package ecosystems and output formats.

Syft

Docker Hardened Image

Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.