Calico Webhooks

Docker Hardened Image

Validating admission webhook server for Calico tiered RBAC enforcement on policy resources.

httpbin

Docker Hardened Image

A simple HTTP request and response service for testing HTTP clients, libraries, and proxies.

PgBouncer Exporter

Docker Hardened Image

PgBouncer Exporter exposes PgBouncer connection pool statistics as Prometheus metrics, covering client and server connections, pool health, and query statistics.

OpenResty

Docker Hardened Image

OpenResty is a dynamic web platform that bundles an enhanced NGINX core with LuaJIT and a collection of Lua libraries and NGINX modules.

Karma is an alert dashboard for Prometheus Alertmanager that aggregates alerts from multiple Alertmanager instances, deduplicates and groups them, and provides silence management.

Hyperledger Fabric Orderer

Docker Hardened Image

Orderer service that runs as part Hyperledger Fabric networks and provides an atomic broadcast ordering service for consumption by the peers

SendGrid Python

Docker Hardened Image

The official Twilio SendGrid Python client library for the SendGrid Web API v3, preinstalled on a hardened Python runtime.

Forklift API

Docker Hardened Image

Forklift API is the API server component of the Forklift VM migration toolkit. It serves the mutating and validating admission webhooks for Forklift custom resources and the auxiliary HTTP services the Forklift controller calls during migrations to KubeVirt.

Yet Another CloudWatch Exporter (YACE)

Docker Hardened Image

YACE is a Prometheus exporter for AWS CloudWatch that auto-discovers resources through AWS tags and exposes their metrics with AWS tags as labels.

Forklift OVA Provider Server

Docker Hardened Image

Forklift OVA Provider Server inventories OVA appliances on an NFS share and serves virtual machine, network, and disk metadata to the Forklift controller.

Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

cloudflared

Docker Hardened Image

Cloudflare Tunnel client that connects origin services to the Cloudflare network without opening inbound ports.

Datadog Cluster Agent

Docker Hardened Image

Datadog Cluster Agent runs centralized Kubernetes cluster-level checks, serves a custom-metrics provider for HPA, and acts as a proxy between node agents and the Kubernetes API.

Secrets Store CSI Driver CRDs

Docker Hardened Image

Packages the Secrets Store CSI Driver CustomResourceDefinitions together with kubectl, so a cluster can register SecretProviderClass and SecretProviderClassPodStatus before the driver itself is deployed.

Forklift OVA Proxy

Docker Hardened Image

Forklift OVA Proxy fronts the OVA provider inventory service, reverse proxying appliance requests from the Forklift console to the provider server inside the cluster.

Teleport

Docker Hardened Image

Teleport is an identity-aware access platform that provides SSO, short-lived certificates, MFA and session recording for SSH, Kubernetes, databases, web apps and Windows desktops.

k6-operator

Docker Hardened Image

An operator for running distributed k6 tests.

CSI-Addons Sidecar

Docker Hardened Image

csi-addons-k8s-sidecar is the Kubernetes CSI-Addons sidecar that runs alongside a CSI driver to expose advanced storage operations such as reclaim space, network fence, encryption key rotation and volume replication to the CSI-Addons controller.

Centrifugo

Docker Hardened Image

Centrifugo is a scalable real-time messaging server that adds WebSocket, SSE, and HTTP-streaming pub/sub to any application backend.

NGINX LDAP Auth

Docker Hardened Image

LDAP authentication daemon for the NGINX auth_request module, supporting OpenLDAP and Active Directory.

StackHawk MCP Server

Docker Hardened Image

A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the StackHawk application security testing platform.

KServe LocalModelNode Agent

Docker Hardened Image

Enables local model node management and caching.

GitHub Actions Runner

Docker Hardened Image

Self-hosted runner that listens for and executes GitHub Actions workflow jobs.

Forklift Hyper-V Provider Server

Docker Hardened Image

Forklift Hyper-V Provider Server validates exported Hyper-V disk paths on an SMB share for Forklift migration plans.

Forklift Must-Gather

Docker Hardened Image

Forklift must-gather is the diagnostics collector for the Forklift VM migration toolkit. It gathers Forklift and KubeVirt custom resources, pod logs, and optional metrics into a support archive via oc adm must-gather.

MongoDB MCP Server

Docker Hardened Image

A Model Context Protocol server for MongoDB that enables querying and schema discovery via MCP.

Flux Operator

Docker Hardened Image

Kubernetes operator that manages the lifecycle of Flux CD, providing declarative install, upgrade, and configuration of the GitOps toolkit along with a web UI for monitoring the delivery pipelines.

Calico Pod2Daemon FlexVol

Docker Hardened Image

Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

Spilo

Docker Hardened Image

HA PostgreSQL appliance with Patroni, a multi-major PostgreSQL bundle, and WAL-G backups.