Argo CD Image Updater Helm chart

Docker Hardened Image

A tool to automatically update container images of Kubernetes workloads managed by Argo CD.

Kyverno Helm chart

Docker Hardened Image

Kyverno is a Kubernetes Native Policy Management engine.

AWS EFS CSI Driver

Docker Hardened Image

The AWS EFS CSI driver provides Container Storage Interface (CSI) support for Amazon EFS file systems in Kubernetes clusters. It enables dynamic and static provisioning of EFS volumes.

Scalable datastore for metrics, events, and real-time analytics

Contour

Docker Hardened Image

Contour is a Kubernetes ingress controller using Envoy proxy to provide dynamic configuration updates and high performance load balancing. It supports Ingress, HTTPProxy, and Gateway API.

Goldilocks Helm chart

Docker Hardened Image

A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.

LocalStack

Docker Hardened Image

LocalStack is a cloud software development framework to develop and test your AWS applications locally.

clamav

Docker Hardened Image

ClamAV is an open source (GPLv2) anti-virus toolkit, designed especially for e-mail scanning on mail gateways.

Virt Export Proxy

Docker Hardened Image

Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt

JRuby

Docker Hardened Image

JRuby is an implementation of the Ruby programming language that runs on the Java Virtual Machine (JVM).

Git

Docker Hardened Image

Distributed version control system for tracking changes in source code

Cassandra Reaper

Docker Hardened Image

Cassandra Reaper is a centralized, stateful, highly available tool for running Apache Cassandra repairs against single or multi-site clusters.

Ceph CSI

Docker Hardened Image

Container Storage Interface driver for Ceph-backed RBD, CephFS, NFS, and NVMe-oF workloads on Kubernetes.

DataHub Ingestion

Docker Hardened Image

DataHub metadata ingestion CLI for emitting metadata from data sources, BI tools, and data warehouses into DataHub.

Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

k6

Docker Hardened Image

Grafana k6 is a modern load testing tool using Go and JavaScript for performance testing

Sealed Secrets Controller Helm chart

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

Harbor Registry

Docker Hardened Image

Docker Distribution registry for storing and distributing container images within Harbor

Prometheus Pushgateway

Docker Hardened Image

A push gateway for Prometheus that accepts metrics from ephemeral or batch jobs and exposes them for scraping by Prometheus.

DataHub Actions

Docker Hardened Image

Event-driven framework that reacts to real-time changes in DataHub's metadata graph by polling Kafka topics and invoking pluggable actions (Slack/Teams notifications, doc/tag propagation, executor for UI-triggered ingestion).

Kyverno Readiness Checker

Docker Hardened Image

Kyverno Readiness Checker is a component that checks the readiness of a Kyverno installation

Cilium DNS Proxy

Docker Hardened Image

Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.

LiteLLM

Docker Hardened Image

LiteLLM is a universal LLM API gateway that provides OpenAI-compatible APIs for 100+ LLM providers including Bedrock, Azure, OpenAI, Anthropic, Vertex AI, and more.

Elixir

Docker Hardened Image

Elixir is a dynamic, functional language built on the Erlang VM (BEAM) for building scalable, fault-tolerant applications.

Reloader

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

Kubernetes API Server (kube-apiserver)

Docker Hardened Image

Front end for the Kubernetes control plane. kube-apiserver exposes the Kubernetes API over HTTP(S), performs request validation, authentication and authorization, runs admission control, and persists cluster state to an etcd backend.

Jaeger Spark Dependencies

Docker Hardened Image

Spark batch job that analyzes Jaeger tracing data to build service dependency graphs.

Apache Druid

Docker Hardened Image

Apache Druid is a high performance real-time analytics database designed for workflows where fast queries and ingest really matter.

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

Prometheus Blackbox Exporter

Docker Hardened Image

Prometheus exporter for probing network endpoints via HTTP, HTTPS, DNS, TCP, ICMP, and gRPC.