Grafana Mimir

Docker Hardened Image

Scalable, multi-tenant, long-term storage backend for Prometheus metrics.

Atlantis

Docker Hardened Image

Atlantis is a self-hosted application for automating Terraform pull request workflows.

GitLab Pages

Docker Hardened Image

GitLab Pages is the static site hosting service built into GitLab, letting you publish static websites directly from a project repository.

Tekton CLI

Docker Hardened Image

The Tekton CLI (tkn) manages Tekton Pipelines, Tasks, and Triggers resources from the command line. It creates, starts, describes and follows the logs of pipeline and task runs against a Kubernetes cluster, and packages Tekton resources as OCI bundles.

Falco

Docker Hardened Image

Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.

Calico Goldmane

Docker Hardened Image

Calico flow aggregation service for network flow telemetry.

Qdrant

Docker Hardened Image

A high-performance vector database and similarity search engine for building the next generation of AI applications.

Fetch MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to fetch and convert web content for usage by LLMs. This server enables LLMs to retrieve and process content from web pages, converting HTML to markdown for easier consumption.

Snyk CLI

Docker Hardened Image

Find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code

Milvus

Docker Hardened Image

Milvus is a high-performance, cloud-native vector database built for scalable vector similarity search, powering RAG, semantic search and recommendation systems.

WireMock

Docker Hardened Image

Flexible API mocking tool for service virtualization that enables developers to simulate HTTP-based APIs for testing purposes.

SPIFFE CSI Driver

Docker Hardened Image

Kubernetes CSI driver that injects the SPIFFE Workload API socket into workload pods as an ephemeral inline volume.

AuthService

Docker Hardened Image

Envoy external authorization service that moves OIDC/OAuth2 token acquisition out of application code and into the Istio mesh

cloudflared

Docker Hardened Image

Cloudflare Tunnel client that connects origin services to the Cloudflare network without opening inbound ports.

Perplexity MCP Server

Docker Hardened Image

A Model Context Protocol server that connects AI assistants to the Perplexity API for real-time web search, reasoning, and research.

Forklift Operator

Docker Hardened Image

Forklift Operator deploys and manages the Forklift toolkit for migrating virtual machines from VMware, oVirt, OpenStack, Hyper-V, EC2, and OVA sources to KubeVirt.

Forklift Populator Controller

Docker Hardened Image

Kubernetes controller that populates persistent volumes during Forklift VM migrations. Part of the Forklift migration toolkit, the populator controller watches OvirtVolumePopulator, OpenstackVolumePopulator, and VSphereXcopyVolumePopulator custom resources and launches the matching populator pod to transfer VM disk data into the target PersistentVolumeClaim on KubeVirt.

Git MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to read, search, and manipulate Git repositories programmatically via LLMs.

Open Cluster Management Registration

Docker Hardened Image

Registration controller and agent for Open Cluster Management hub and spoke cluster lifecycle.

Multus CNI

Docker Hardened Image

Multus CNI is a CNI meta-plugin that enables attaching multiple network interfaces to Kubernetes pods

Headlamp

Docker Hardened Image

Headlamp is a fully-featured, user-friendly and extensible web UI for Kubernetes that runs in-cluster or as a desktop application.

Airflow PgBouncer Exporter exposes PgBouncer connection pool statistics as Prometheus metrics, covering client and server connections, pool health, and query statistics.

Forklift virt-v2v

Docker Hardened Image

Forklift virt-v2v converts VM guest disks for migration to KubeVirt, wrapping libguestfs's virt-v2v tool

Forklift Controller

Docker Hardened Image

Forklift Controller orchestrates migrations of virtual machines from VMware, oVirt, OpenStack, OVA, and Hyper-V to KubeVirt.

Kubeflow Pipelines - Metadata Writer

Docker Hardened Image

The Kubeflow Pipelines Metadata Writer handles pipeline execution metadata in the Kubeflow Pipeline ecosystem.

Ceph CSI Operator

Docker Hardened Image

Ceph CSI Operator is a Kubernetes operator that deploys and manages the Ceph CSI drivers for RBD, CephFS, NFS, and NVMe-oF storage workloads.

Forklift oVirt Populator

Docker Hardened Image

Forklift oVirt Populator downloads a disk from an oVirt engine into a Kubernetes PersistentVolumeClaim during a Forklift migration, bundling the ovirt-img client and the QEMU disk tools it runs.

Hyperledger Fabric Tools

Docker Hardened Image

CLI tools for managing Hyperledger Fabric networks

Hyperledger Fabric Orderer

Docker Hardened Image

Orderer service that runs as part Hyperledger Fabric networks and provides an atomic broadcast ordering service for consumption by the peers

Calico Webhooks

Docker Hardened Image

Validating admission webhook server for Calico tiered RBAC enforcement on policy resources.