Amazon EKS Pod Identity Webhook

Docker Hardened Image

The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.

KServe LocalModel Controller

Docker Hardened Image

Enables local model caching and management.

Tailscale Kubernetes Operator

Docker Hardened Image

Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.

S3Proxy

Docker Hardened Image

S3Proxy implements the S3 API and proxies requests to backends such as the local filesystem, Azure Blob Storage, Google Cloud Storage, and other providers via Apache jclouds.

Ory Oathkeeper Maester

Docker Hardened Image

Kubernetes controller that watches Ory Oathkeeper Rule custom resources and renders them into the access rules ConfigMap or file that Ory Oathkeeper consumes.

Azure ResourceManager Exporter

Docker Hardened Image

Prometheus exporter for Azure Resource Manager quotas, costs, resource health, IAM, and Defender security metrics.

Upstash Context7 MCP Server

Docker Hardened Image

A Model Context Protocol server from Upstash that exposes Context7 tools over MCP.

JupyterHub K8s Image Awaiter

Docker Hardened Image

A minimal init container image for JupyterHub that waits for images to be pre-pulled on Kubernetes nodes.

R

Docker Hardened Image

R is a free software environment for statistical computing and graphics.

Azure ResourceGraph Exporter

Docker Hardened Image

Prometheus exporter for Azure ResourceGraph queries

Harbor Helm chart

Docker Hardened Image

Harbor - An open source trusted cloud native registry that stores, signs, and scans content

Jaeger ES Rollover

Docker Hardened Image

Jaeger es-rollover initializes, rolls over and trims the aliased Jaeger indices in an Elasticsearch cluster.

Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped

OpenTelemetry Operator Helm chart

Docker Hardened Image

Kubernetes operator for managing OpenTelemetry Collectors and auto-instrumentation

Zot Helm chart

Docker Hardened Image

Zot is a production-ready, vendor-neutral OCI image registry with full OCI standards compliance and scalability.

Forklift vSphere Copy Offload Populator

Docker Hardened Image

Forklift vSphere Copy Offload Populator clones VMware source disks directly on storage arrays through vSphere XCOPY, populating Kubernetes PersistentVolumeClaims without host data paths.

Selenium Node Chromium

Docker Hardened Image

Selenium Grid worker node running Chromium with chromedriver, the arm64-capable browser node for Selenium Grid 4.x. Registers with a Selenium Hub and serves WebDriver sessions backed by the open-source Chromium browser.

Forklift Console Plugin

Docker Hardened Image

OpenShift console dynamic plugin for Forklift, the Migration Toolkit for Virtualization. Adds the migration UI (providers, plans, network and storage mappings) for moving virtual machines from VMware vSphere, oVirt, OpenStack, and OVA to KubeVirt.

Kiali Operator

Docker Hardened Image

Kiali Operator installs and manages Kiali instances on Kubernetes and OpenShift using Kiali custom resources.

OpenTelemetry Java Autoinstrumentation

Docker Hardened Image

This is a Java autoinstrumentation agent used by the OpenTelemetry Operator

Cilium Helm chart

Docker Hardened Image

eBPF-based Networking, Security, and Observability for Kubernetes

Percona Server

Docker Hardened Image

Percona Server is a drop-in replacement for MySQL with enhanced performance, scalability, and observability.

Codecov Frontend

Docker Hardened Image

Codecov Frontend is the single-page web application of a self-hosted Codecov deployment, served by nginx in front of the Codecov API.

Trust-Manager Helm chart

Docker Hardened Image

trust-manager manages TLS trust bundles in Kubernetes and OpenShift clusters.

GitHub MCP Server

Docker Hardened Image

GitHub's official MCP Server connects AI tools directly to GitHub's platform. This gives AI agents, assistants, and chatbots the ability to read repositories and code files, manage issues and PRs, analyze code, and automate workflows.

NVIDIA GPU Operator

Docker Hardened Image

The NVIDIA GPU Operator automates the management of the NVIDIA software components needed to provision GPUs in Kubernetes clusters. This image ships the operator controller, the nvidia-validator, the vectorAdd CUDA validation sample, and kubectl, together with the operand manifests the controller renders at runtime and the operator CRDs.

AWS Provider for Secrets Store CSI Driver

Docker Hardened Image

The AWS provider for the Secrets Store CSI Driver fetches secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store and mounts them into Kubernetes pods as files, supporting both IRSA and EKS Pod Identity authentication.

mise

Docker Hardened Image

Polyglot runtime and dev-tool version manager, environment manager, and task runner.

Matomo

Docker Hardened Image

Open-source web analytics platform and Google Analytics alternative.

Envoy Contrib

Docker Hardened Image

Envoy built with the contrib extensions, adding protocol filters such as Postgres, MySQL, Kafka, SIP, and RocketMQ on top of the core high-performance L7 proxy.