Headlamp

Docker Hardened Image

Headlamp is a fully-featured, user-friendly and extensible web UI for Kubernetes that runs in-cluster or as a desktop application.

Multus CNI

Docker Hardened Image

Multus CNI is a CNI meta-plugin that enables attaching multiple network interfaces to Kubernetes pods

Forklift Controller

Docker Hardened Image

Forklift Controller orchestrates migrations of virtual machines from VMware, oVirt, OpenStack, OVA, and Hyper-V to KubeVirt.

Forklift virt-v2v

Docker Hardened Image

Forklift virt-v2v converts VM guest disks for migration to KubeVirt, wrapping libguestfs's virt-v2v tool

kong/kubernetes-ingress-controller

Kong Inc.

Use Kong for Kubernetes Ingress

Ceph CSI Operator

Docker Hardened Image

Ceph CSI Operator is a Kubernetes operator that deploys and manages the Ceph CSI drivers for RBD, CephFS, NFS, and NVMe-oF storage workloads.

Kubeflow Pipelines - Metadata Writer

Docker Hardened Image

The Kubeflow Pipelines Metadata Writer handles pipeline execution metadata in the Kubeflow Pipeline ecosystem.

Forklift oVirt Populator

Docker Hardened Image

Forklift oVirt Populator downloads a disk from an oVirt engine into a Kubernetes PersistentVolumeClaim during a Forklift migration, bundling the ovirt-img client and the QEMU disk tools it runs.

Hyperledger Fabric Tools

Docker Hardened Image

CLI tools for managing Hyperledger Fabric networks

grafana/mimir

Grafana Labs

Horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

Hyperledger Fabric Orderer

Docker Hardened Image

Orderer service that runs as part Hyperledger Fabric networks and provides an atomic broadcast ordering service for consumption by the peers

Centrifugo

Docker Hardened Image

Centrifugo is a scalable real-time messaging server that adds WebSocket, SSE, and HTTP-streaming pub/sub to any application backend.

Jaeger

Docker Hardened Image

A minimal Jaeger v2 all-in-one distributed tracing image

lightstreamer

Docker Official Image

Lightstreamer is a real-time messaging server optimized for the Internet.

Supabase Storage

Docker Hardened Image

S3-compatible object storage service that keeps its metadata in Postgres.

Calico Webhooks

Docker Hardened Image

Validating admission webhook server for Calico tiered RBAC enforcement on policy resources.

Azure ResourceGraph Exporter

Docker Hardened Image

Prometheus exporter for Azure ResourceGraph queries

circleci/ruby

CircleCI

Ruby is a dynamic, reflective, object-oriented, general-purpose, open-source programming language.

PgBouncer Exporter

Docker Hardened Image

PgBouncer Exporter exposes PgBouncer connection pool statistics as Prometheus metrics, covering client and server connections, pool health, and query statistics.

Forklift API

Docker Hardened Image

Forklift API is the API server component of the Forklift VM migration toolkit. It serves the mutating and validating admission webhooks for Forklift custom resources and the auxiliary HTTP services the Forklift controller calls during migrations to KubeVirt.

geonetwork

Docker Official Image

GeoNetwork is a FOSS catalog for spatially referenced resources.

Handshake service for kernel TLS consumers

Time MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools for time queries and timezone conversions for LLMs.

cirros

Docker Official Image

CirrOS is a Tiny OS that specializes in running on a cloud.

clearlinux

Docker Official Image

DEPRECATED; Official docker build of Clear Linux OS for Intel Architecture

Teleport

Docker Hardened Image

Teleport is an identity-aware access platform that provides SSO, short-lived certificates, MFA and session recording for SSH, Kubernetes, databases, web apps and Windows desktops.

SendGrid Python

Docker Hardened Image

The official Twilio SendGrid Python client library for the SendGrid Web API v3, preinstalled on a hardened Python runtime.

Forklift OVA Provider Server

Docker Hardened Image

Forklift OVA Provider Server inventories OVA appliances on an NFS share and serves virtual machine, network, and disk metadata to the Forklift controller.

Secrets Store CSI Driver CRDs

Docker Hardened Image

Packages the Secrets Store CSI Driver CustomResourceDefinitions together with kubectl, so a cluster can register SecretProviderClass and SecretProviderClassPodStatus before the driver itself is deployed.

Yet Another CloudWatch Exporter (YACE)

Docker Hardened Image

YACE is a Prometheus exporter for AWS CloudWatch that auto-discovers resources through AWS tags and exposes their metrics with AWS tags as labels.