Source Controller

Docker Hardened Image

Flux CD component that acquires artifacts from external sources such as Git repositories, Helm repositories, and OCI registries, making them available to other Flux controllers.

Helm Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Helm charts declared as HelmRelease resources in Kubernetes, enabling GitOps-driven Helm deployments.

OpenMetadata

Docker Hardened Image

OpenMetadata is an open platform for data discovery, observability, and governance.

Cilium Clustermesh API Server

Docker Hardened Image

Cilium Clustermesh API Server is a load balancing API for Cilium clusters

Docker Scout SBOM Indexer

Docker Hardened Image

A specialized tool for generating Software Bill of Materials (SBOM) by scanning file systems and indexing packages for Docker Scout and BuildKit integration.

kube-rbac-proxy

Docker Hardened Image

a small HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using SubjectAccessReview.

Argo CD Image Updater

Docker Hardened Image

A tool to automatically update container images of Kubernetes workloads managed by Argo CD.

Dart

Docker Hardened Image

Dart is a client-optimized programming language for fast apps on any platform.

Istio Install CNI

Docker Hardened Image

Istio CNI installer image and daemonset for Kubernetes environments

CouchDB

Docker Hardened Image

CouchDB is a database that uses JSON for documents, an HTTP API, & JavaScript declarative indexing.

RabbitMQ

Docker Hardened Image

RabbitMQ is an open source multi-protocol messaging broker.

Metrics Server

Docker Hardened Image

Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines. It collects resource metrics from Kubelets and exposes them in Kubernetes apiserver through Metrics API for use by Horizontal Pod Autoscaler and Vertical Pod Autoscaler.

Calico Node

Docker Hardened Image

Calico's per-host DaemonSet container image. Provides CNI networking and policy for Kubernetes.

sentry

Docker Official Image

DEPRECATED; https://develop.sentry.dev/self-hosted/

Kyverno CLI

Docker Hardened Image

The Kyverno Command Line Interface (CLI) is designed to validate and test policy behavior to resources prior to adding them to a cluster.

Cilium Operator Azure

Docker Hardened Image

Cilium Operator for Azure environments

SapMachine

Docker Hardened Image

SapMachine is SAP's downstream distribution of OpenJDK providing production-ready JDK and JRE builds. This image packages the SapMachine JDK for use in containers with JAVA_HOME set to /opt/java/openjdk and common Java CLI tools available on PATH.

SPIFFE SPIRE Agent

Docker Hardened Image

Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.

Harbor Job Service

Docker Hardened Image

Harbor Job Service is the asynchronous task execution component of Harbor registry that handles background operations like replication, garbage collection, vulnerability scanning, and retention policies.

SPIFFE SPIRE Server

Docker Hardened Image

Central SPIRE control plane that issues and manages SPIFFE workload identities.

Kubernetes Controller Manager (kube-controller-manager)

Docker Hardened Image

Runs core control loops in the Kubernetes control plane. kube-controller-manager runs controller processes that regulate the state of the cluster and perform routine tasks.

Virt Handler

Docker Hardened Image

Virt Handler manages virtual machine processes on each node in a KubeVirt cluster

Cassandra

Docker Hardened Image

Open source NoSQL distributed database.

Cilium Hubble Relay

Docker Hardened Image

Relay server for aggregating and exposing Hubble observability data

Fluent Bit

Docker Hardened Image

Fluent Bit is an open source data collector for unified logging layer.

datadog/agent

Datadog

Docker container for the new Datadog Agent

AWS Mountpoint S3 CSI Driver

Docker Hardened Image

The AWS Mountpoint for Amazon S3 CSI driver provides Container Storage Interface (CSI) support for mounting S3 buckets as storage volumes in Kubernetes clusters using Mountpoint for Amazon S3.

Logstash

Docker Hardened Image

Logstash is a tool for managing events and logs.

Langfuse Worker

Docker Hardened Image

Background job processor for the Langfuse LLM engineering platform, handling evaluations, ingestion, batch exports, and data retention.

nats-streaming

Docker Official Image

DEPRECATED; An open-source, high-performance, cloud native messaging streaming system.