Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.

amazon-k8s-cni-init

Docker Hardened Image

Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.

CSI Hostpath Plugin

Docker Hardened Image

csi-hostpath-plugin is a Kubernetes CSI driver that uses the host's filesystem as storage, commonly used for testing and development purposes.

Zookeeper

Docker Hardened Image

Apache Zookeeper is a distributed coordination service for distributed applications

WBITT Network Multitool

Docker Hardened Image

A multi-arch multitool for container and network testing and troubleshooting. Includes a comprehensive set of networking utilities and a minimal nginx web server for easy access and testing. The -extra flavor includes additional tools for advanced networking, database connectivity, and security testing.

ChartMuseum

Docker Hardened Image

An open-source Helm Chart Repository server with support for cloud and local storage backends.

GitLab Workhorse

Docker Hardened Image

GitLab Workhorse is the smart reverse proxy that sits in front of GitLab, handling resource-intensive HTTP requests such as file uploads and downloads, Git operations, and archive downloads.

docker/ucp-auth

Docker, Inc.

Please refer to the docker/ucp image for more information

Actions Runner Controller

Docker Hardened Image

Kubernetes controller that orchestrates ephemeral self-hosted GitHub Actions runners using autoscaling runner scale sets.

Azure Functions (Python)

Docker Hardened Image

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network

Varnish Cache

Docker Hardened Image

Varnish Cache is a high-performance HTTP accelerator and caching reverse proxy designed to speed up web applications by caching content in memory and serving it at very high throughput.

drbd-shutdown-guard

Docker Hardened Image

An init-container utility that ensures DRBD resources are properly handled during system shutdown

Velero Plugin for GCP

Docker Hardened Image

Plugin to support running Velero on GCP.

Local Path Provisioner

Docker Hardened Image

Kubernetes controller that dynamically provisions local persistent volumes backed by node-local storage using hostPath or local volume types.

Open Cluster Management Addon Manager

Docker Hardened Image

Runs on the hub cluster and configures the installation of addon agents for each managed cluster.

Open Cluster Management Work

Docker Hardened Image

Work agent for dispatching Kubernetes manifests to managed clusters via the ManifestWork API.

r-base

Docker Official Image

R is a system for statistical computation and graphics.

Cert Exporter

Docker Hardened Image

A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets

Apache Superset

Docker Hardened Image

Apache Superset is a modern data exploration and visualization platform.

Cilium startup script

Docker Hardened Image

Cilium startup script

Kyverno Reports Server

Docker Hardened Image

Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.

Multus Dynamic Networks Controller

Docker Hardened Image

A Kubernetes controller granting the ability to plug/unplug network interfaces to/from running pods.

Forklift Operator Index

Docker Hardened Image

OLM File-Based Catalog index image serving the Forklift (Migration Toolkit for Virtualization) operator catalog.

Node Problem Detector

Docker Hardened Image

A Kubernetes daemon that detects node-level problems — kernel issues, hardware faults, and runtime failures — and reports them to the API server as Events and NodeConditions.

Deno

Docker Hardened Image

Deno is a secure runtime for JavaScript and TypeScript with built-in tooling, modern standards support, and first-class TypeScript support.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

SpiceDB Operator

Docker Hardened Image

SpiceDB Operator manages SpiceDB authorization database instances in Kubernetes via SpiceDBCluster custom resources, handling provisioning, configuration, and version upgrades.

Kafka Exporter

Docker Hardened Image

A Prometheus exporter for Kafka metrics