Tailscale Kubernetes Operator

Docker Hardened Image

Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.

Cilium Helm chart

Docker Hardened Image

eBPF-based Networking, Security, and Observability for Kubernetes

Envoy Contrib

Docker Hardened Image

Envoy built with the contrib extensions, adding protocol filters such as Postgres, MySQL, Kafka, SIP, and RocketMQ on top of the core high-performance L7 proxy.

wait-for-it

Docker Hardened Image

A pure bash script to test and wait on the availability of a TCP host and port. Useful for synchronizing the spin-up of interdependent services in Docker Compose.

JupyterHub K8s Network Tools

Docker Hardened Image

A minimal iptables init container image for JupyterHub on Kubernetes.

Tigera Operator Helm chart

Docker Hardened Image

Helm chart for installing the Tigera operator to deploy and manage Calico.

Linkerd Controller

Docker Hardened Image

The Linkerd control plane controller, with its destination, identity, proxy injector and policy controller.

Linkerd Proxy

Docker Hardened Image

The Linkerd service mesh data plane proxy, with its identity agent and init-container tools.

Calico Third-Party CNI Plugins

Docker Hardened Image

Upstream CNI plugins staged by Calico onto cluster nodes (host-local, portmap, loopback, tuning, flannel).

Stunnel

Docker Hardened Image

stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.

OpenTelemetry eBPF Reducer

Docker Hardened Image

Aggregates and enriches network telemetry from OpenTelemetry eBPF collectors, exporting metrics via Prometheus or OTLP/gRPC.

Calico

Docker Hardened Image

Calico combined binary for networking and network security in Kubernetes, bundling the Calico components and the CSI node driver registrar.

Telepresence

Docker Hardened Image

Telepresence connects a local development machine to a remote Kubernetes cluster, so you can run and debug one service locally while it talks to the rest of the cluster. This image is the client, used as the daemon container for telepresence connect --docker.

AWS VPC CNI Helm chart

Docker Hardened Image

The AWS VPC CNI plugin provides native Amazon VPC networking for Kubernetes pods on Amazon EKS and EC2 nodes.

AWS Load Balancer Controller Helm chart

Docker Hardened Image

The AWS Load Balancer Controller manages AWS Elastic Load Balancers for Kubernetes clusters, provisioning ALBs for Ingress resources and NLBs for Service resources.

Grafana PDC Agent

Docker Hardened Image

Private Datasource Connect agent that opens a reverse SSH tunnel so Grafana Cloud can query data sources on a private network.