GitLab Shell

Docker Hardened Image

GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.

Strimzi Kafka Operator Helm chart

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

Kubeflow Pipelines - API Server

Docker Hardened Image

The Kubeflow Pipelines API Server coordinates k8s workflows in the Kubeflow Pipeline ecosystem.

CDI Upload Proxy

Docker Hardened Image

CDI Upload Proxy forwards upload requests to the CDI upload server for virtual machine disk images

Dapr Injector

Docker Hardened Image

Kubernetes admission controller that automatically injects the Dapr sidecar container into pods, enabling Dapr capabilities for applications.

NetBox

Docker Hardened Image

NetBox is the open-source network infrastructure source of truth — IPAM and DCIM in one Django application.

CDI Cloner

Docker Hardened Image

CDI Cloner clones persistent volume claims for virtual machine disk management in Kubernetes

CDI API Server

Docker Hardened Image

CDI API Server provides a Kubernetes API extension for managing virtual machine disk image imports in KubeVirt

Kubernetes Autoscaler Addon Resizer

Docker Hardened Image

A container that watches over another container in a deployment and vertically scales the dependent container up and down based on the number of nodes in the cluster.

Dapr Operator

Docker Hardened Image

Kubernetes operator that manages Dapr component Custom Resources (state stores, pub/sub, bindings, etc.) and provides validation webhooks for component configurations.

Dapr Sentry

Docker Hardened Image

Dapr Sentry certificate authority that issues mTLS certificates for secure communication between Dapr sidecars and control plane components.

Dapr Scheduler

Docker Hardened Image

A Dapr control-plane service that manages persistent job scheduling, reminders, and timers for distributed applications.

VictoriaMetrics Cluster Helm chart

Docker Hardened Image

A observability solution and time series database

Cass Config Builder

Docker Hardened Image

Configuration templating engine for Apache Cassandra, used by the DataStax Kubernetes Operator.

MongoDB Controllers for Kubernetes (MCK)

Docker Hardened Image

A Kubernetes operator that enables users to run MongoDB in Kubernetes

SeaweedFS COSI Driver

Docker Hardened Image

SeaweedFS COSI Driver is a Kubernetes Container Object Storage Interface implementation for dynamic object storage provisioning.

VictoriaMetrics VMAuth

Docker Hardened Image

VictoriaMetrics VMAuth is an HTTP proxy for authorizing, routing, and load balancing requests to VictoriaMetrics components.

Connaisseur

Docker Hardened Image

A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.

amazon-k8s-cni-init

Docker Hardened Image

Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.

Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.

K8ssandra Cass Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Apache Cassandra clusters. Handles provisioning, scaling, rolling restarts, upgrades, and failure remediation for production-grade Cassandra workloads in Kubernetes environments.

GitLab Workhorse

Docker Hardened Image

GitLab Workhorse is the smart reverse proxy that sits in front of GitLab, handling resource-intensive HTTP requests such as file uploads and downloads, Git operations, and archive downloads.

Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.

Prometheus Helm Chart

Docker Hardened Image

Prometheus is a systems and service monitoring system that records metrics in a time series database.

Codecov API

Docker Hardened Image

Codecov API is the Django REST and GraphQL backend of a self-hosted Codecov deployment, serving the dashboard, coverage uploads and repository webhooks.

CSI Hostpath Plugin

Docker Hardened Image

csi-hostpath-plugin is a Kubernetes CSI driver that uses the host's filesystem as storage, commonly used for testing and development purposes.

WBITT Network Multitool

Docker Hardened Image

A multi-arch multitool for container and network testing and troubleshooting. Includes a comprehensive set of networking utilities and a minimal nginx web server for easy access and testing. The -extra flavor includes additional tools for advanced networking, database connectivity, and security testing.

Actions Runner Controller

Docker Hardened Image

Kubernetes controller that orchestrates ephemeral self-hosted GitHub Actions runners using autoscaling runner scale sets.

ChartMuseum

Docker Hardened Image

An open-source Helm Chart Repository server with support for cloud and local storage backends.

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network