MySQL Server Exporter

Docker Hardened Image

A Prometheus exporter for MySQL Server (mysqld_exporter) exposing server status and performance metrics.

OpenTelemetry Target Allocator

Docker Hardened Image

The Target Allocator (TA) is an optional component of the OpenTelemetry Operator that discovers Prometheus targets and shards them across a fleet of OpenTelemetry Collector instances. It provides HTTP endpoints that Collectors use to fetch their assigned scrape targets (e.g. /jobs, /jobs/{job}/targets, /scrape_configs) and supports config-file and CR-based discovery.

OpenSearch Helm chart

Docker Hardened Image

OpenSearch is a distributed, RESTful search and analytics engine designed for a wide range of use cases.

Goldilocks

Docker Hardened Image

A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.

Karpenter

Docker Hardened Image

Open-source Kubernetes node autoscaler built for flexibility, performance, and simplicity

Redis MCP Server

Docker Hardened Image

A Model Context Protocol server that lets AI agents interact with Redis databases using natural language.

Kubernetes Cloud Controller Manager (cloud-controller-manager)

Docker Hardened Image

Runs cloud-provider-specific control loops in the Kubernetes control plane. cloud-controller-manager embeds the cloud-specific control loops that integrate a Kubernetes cluster with the underlying cloud provider's APIs.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

Fairwinds VPA Helm chart

Docker Hardened Image

Helm chart to install Kubernetes Vertical Pod Autoscaler that suits Fairwinds suit of products.

Ollama

Docker Hardened Image

Run and serve large language models locally over an HTTP API (CPU inference).

Temporal Helm Chart

Docker Hardened Image

Temporal is a durable execution platform that enables developers to build scalable applications without sacrificing productivity or reliability.

cert-manager-istio-csr

Docker Hardened Image

Certificate signing request agent for integrating cert-manager with Istio

Haskell

Docker Hardened Image

Haskell is a statically typed, purely functional programming language with the Glasgow Haskell Compiler (GHC).

Grafana Rollout Operator

Docker Hardened Image

A Kubernetes operator for coordinating the rollout of Grafana pods between different StatefulSets

vSphere CSI Driver

Docker Hardened Image

Container Storage Interface (CSI) driver for VMware vSphere. Provisions and attaches vSphere volumes for Kubernetes workloads, running as the CSI controller plugin and as the node plugin that formats and mounts volumes.

OpenSearch Dashboards

Docker Hardened Image

OpenSearch Dashboards is a data visualization and user interface for OpenSearch

Harbor Redis

Docker Hardened Image

Harbor Redis is the Redis component used by the Harbor container registry for session management, job queue, and caching. It ships a Harbor-specific redis.conf and healthcheck script on top of Redis.

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

ActiveMQ Artemis

Docker Hardened Image

Apache ActiveMQ Artemis is an open source project to build a multi-protocol, embeddable, very high performance, clustered, asynchronous messaging system.

AWS SigV4 Proxy

Docker Hardened Image

This project signs and proxies HTTP requests with Sigv4

SpiceDB

Docker Hardened Image

An open source, Google Zanzibar-inspired database for fine-grained authorization.

k8ssandra-system-logger

Docker Hardened Image

k8ssandra-system-logger packages Vector (vectordotdev/vector) as a small sidecar image that tails Cassandra system logs and writes them to stdout. It is designed to run as a nonroot sidecar alongside Cassandra to surface /var/log/cassandra/*.log to container stdout for collection by cluster logging agents or centralized logging systems.

OpenCost UI

Docker Hardened Image

Web-based UI for OpenCost Kubernetes cost monitoring

Grafana Beyla

Docker Hardened Image

Grafana Beyla is an eBPF-based application auto-instrumentation tool that captures OpenTelemetry traces and metrics for web services and network flows without code changes.

Confluent Platform Kafka

Docker Hardened Image

Apache Kafka packaged for Confluent Platform, configured through KAFKA_* environment variables by the Confluent container launch scripts.

Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Kured

Docker Hardened Image

Kubernetes Reboot Daemon

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

KServe Controller

Docker Hardened Image

A Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks.