Jenkins Agent

Docker Hardened Image

Jenkins Agent is a base image for Docker that includes Java and the Jenkins agent executable (agent.jar). This executable is an instance of the Jenkins Remoting library and enables distributed build capabilities for Jenkins controllers.

Velero Helm chart

Docker Hardened Image

Velero is an open source tool to safely back up and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes.

Kured

Docker Hardened Image

Kubernetes Reboot Daemon

Karpenter

Docker Hardened Image

Open-source Kubernetes node autoscaler built for flexibility, performance, and simplicity

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

cert-manager-istio-csr

Docker Hardened Image

Certificate signing request agent for integrating cert-manager with Istio

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

AWS Node Termination Handler

Docker Hardened Image

Gracefully handles EC2 instance termination events in Kubernetes by cordoning and draining nodes before shutdown, supporting spot interruptions, scheduled maintenance, and ASG scale-in events.

Distribution Registry

Docker Hardened Image

The toolkit to pack, ship, store, and deliver container content

Git-sync

Docker Hardened Image

git-sync is a sidecar that pulls a git repository into a local directory, keeping it synced to a remote.

AWS Private CA Issuer

Docker Hardened Image

AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.

API Declarative CLI (ADC)

Docker Hardened Image

ADC is a command line utility that interfaces with API7 Enterprise and Apache APISIX Admin APIs.

amazon-k8s-cni

Docker Hardened Image

Networking plugin for pod networking in Kubernetes using Elastic Network Interfaces on AWS.

Jenkins Inbound Agent

Docker Hardened Image

Jenkins Inbound Agent is a specialized Docker image for Kubernetes and containerized environments. It automatically connects to a Jenkins controller using environment variables, making it ideal for dynamic agent provisioning in Kubernetes clusters and CI/CD pipelines.

dapr-daprd

Docker Hardened Image

Dapr runtime sidecar that provides building blocks for distributed applications including service invocation, state management, pub/sub, and observability.

FleetConfig Controller

Docker Hardened Image

Kubernetes controller for managing Open Cluster Management FleetConfig hub and spoke resources.

Vertical Pod Autoscaler Admission Controller

Docker Hardened Image

Admission webhook controller for Kubernetes Vertical Pod Autoscaler that sets resource requests on new pods.

Apache NiFi

Docker Hardened Image

A data integration and workflow automation tool that supports powerful and scalable directed graphs of data routing, transformation, and mediation logic.

Velero Plugin for Azure

Docker Hardened Image

Plugin to support running Velero on Azure.

Argo Rollouts Helm Chart

Docker Hardened Image

Argo Rollouts is a Kubernetes controller and set of CRDs which provide advanced deployment capabilities

Source Watcher

Docker Hardened Image

Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.

Vertical Pod Autoscaler Updater

Docker Hardened Image

Monitors the VPA resources and compares current Pod resource requests with the recommendations, evicting and updating pod resources accordingly.

Dapr Placement Service

Docker Hardened Image

Kubernetes control plane service that manages actor placement using a consistent hash ring, enabling distributed actor instances across the cluster with automatic rebalancing.

GitLab Shell

Docker Hardened Image

GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.

Dapr Injector

Docker Hardened Image

Kubernetes admission controller that automatically injects the Dapr sidecar container into pods, enabling Dapr capabilities for applications.

Dapr Operator

Docker Hardened Image

Kubernetes operator that manages Dapr component Custom Resources (state stores, pub/sub, bindings, etc.) and provides validation webhooks for component configurations.

Dapr Sentry

Docker Hardened Image

Dapr Sentry certificate authority that issues mTLS certificates for secure communication between Dapr sidecars and control plane components.

Dapr Scheduler

Docker Hardened Image

A Dapr control-plane service that manages persistent job scheduling, reminders, and timers for distributed applications.

GitLab Workhorse

Docker Hardened Image

GitLab Workhorse is the smart reverse proxy that sits in front of GitLab, handling resource-intensive HTTP requests such as file uploads and downloads, Git operations, and archive downloads.

Actions Runner Controller

Docker Hardened Image

Kubernetes controller that orchestrates ephemeral self-hosted GitHub Actions runners using autoscaling runner scale sets.