Vault CSI Provider

Docker Hardened Image

vault-csi-provider is HashiCorp's official Kubernetes integration that securely mounts Vault secrets as files in pod containers using the Container Storage Interface, enabling applications to access centralized secrets without code changes or embedded credentials.

amazon/aws-cli

Amazon Web Services

Universal Command Line Interface for Amazon Web Services

lacework/datacollector

Lacework Inc

Lacework is cloud security for AWS, Azure, GCP and other public and private cloud.

GitLab Sidekiq

Docker Hardened Image

GitLab Sidekiq runs the background job processor for the GitLab Rails application, handling asynchronous work such as email delivery, repository operations, and CI/CD tasks.

Apache HTTP Server

Docker Hardened Image

The Apache HTTP Server (httpd) is a robust, extensible, and widely used web server for serving static and dynamic content. This Docker Hardened Image provides a minimal, non-root runtime of Apache HTTP Server suitable for production deployments.

Jenkins Agent

Docker Hardened Image

Jenkins Agent is a base image for Docker that includes Java and the Jenkins agent executable (agent.jar). This executable is an instance of the Jenkins Remoting library and enables distributed build capabilities for Jenkins controllers.

Netdata

Docker Hardened Image

Real-time performance monitoring for systems and applications with zero configuration.

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

APISIX

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

VictoriaMetrics VMAlert

Docker Hardened Image

VictoriaMetrics VMAlert is a alerting and recording rules evaluation component for VictoriaMetrics.

piwik

Docker Official Image

DEPRECATED; use "matomo" instead

Polaris

Docker Hardened Image

Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.

NATS Server Config Reloader

Docker Hardened Image

A sidecar utility that watches for NATS configuration file changes and triggers server reloads.

crate

Docker Official Image

CrateDB is an open-source, distributed SQL database empowering you to turn data into business value.

Socket CLI

Docker Hardened Image

Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.

Azure Metrics Exporter

Docker Hardened Image

Azure Monitor metrics exporter for Prometheus

aerospike

Docker Official Image

Aerospike – the reliable, high performance, distributed database optimized for flash and RAM.

ORAS

Docker Hardened Image

ORAS (OCI Registry As Storage) is a command-line tool for managing OCI artifacts in registries. It enables developers to push, pull, copy, and discover various content types beyond container images.

dynatrace/dynatrace-operator

Dynatrace

Automate Kubernetes observability with Dynatrace

Telegraf

Docker Hardened Image

Telegraf is a plugin-driven server agent for collecting and reporting metrics.

ClickHouse Operator

Docker Hardened Image

Altinity's Kubernetes operator for managing ClickHouse clusters.

Docker Scout CLI

Docker Hardened Image

Command-line interface for Docker Scout providing container image analysis, vulnerability scanning, and policy evaluation capabilities for securing your software supply chain.

kubernetes-pause

Docker Hardened Image

kubernetes-pause is the minimal Kubernetes infrastructure container used to hold a pod's shared namespaces.

StatsD Exporter

Docker Hardened Image

A Prometheus exporter that receives StatsD-style metrics and exports them as Prometheus metrics via configurable mapping rules and tagging formats.

MetalLB Controller

Docker Hardened Image

MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.

Prometheus Adapter

Docker Hardened Image

Prometheus Adapter implements the custom.metrics.k8s.io and external.metrics.k8s.io APIs for Kubernetes HPA and VPA, exposing metrics from Prometheus.

Kyverno Policy Reporter UI

Docker Hardened Image

The Kyverno Policy Reporter UI watches for PolicyReport Resources and displays information on a web based UI

CDI Upload Server

Docker Hardened Image

CDI Upload Server handles the upload of virtual machine disk images into persistent volume claims

newrelic/newrelic-fluentbit-output

New Relic

Base container with new relic output plugin for use with our k8 integration and custom deployments.