Image Reflector Controller

Docker Hardened Image

Flux CD component that scans container image repositories and reflects discovered image tags into Kubernetes resources, enabling policy-driven image tag selection for automated updates.

Apache Solr

Docker Hardened Image

Apache Solr is the blazing-fast, open-source, multi-modal search platform built on Apache Lucene. It powers full-text search, faceted navigation, and analytics at scale across enterprise and cloud-native deployments.

Hyperledger Fabric Peer

Docker Hardened Image

Peer node service for Hyperledger Fabric blockchain networks

Image Automation Controller

Docker Hardened Image

Flux CD component that automates container image updates by committing image tag changes back to Git repositories when new image versions are detected.

KServe Storage Initializer

Docker Hardened Image

Downloads model artifacts from various storage backends (S3, GCS, Azure, etc.) before KServe model serving containers start.

Percona Server for MongoDB

Docker Hardened Image

Percona Server for MongoDB is a source-available, drop-in replacement for MongoDB Community Edition with enterprise-grade features.

Gatekeeper

Docker Hardened Image

Policy Controller for Kubernetes, built on Open Policy Agent.

Crane

Docker Hardened Image

Crane is a tool for interacting with remote images and registries. It allows to efficiently inspect, verify and manipulate containers, manifests and image layers as well as checking cryptographic signatures.

ClickHouse Keeper

Docker Hardened Image

ClickHouse Keeper is a ZooKeeper-compatible coordination service for ClickHouse cluster replication and distributed DDL.

OpenFGA

Docker Hardened Image

OpenFGA is an open source Fine Grained Authorization solution that implements Google's Zanzibar paper, helping you manage complex authorization rules in your applications.

MongoDB Exporter

Docker Hardened Image

A Prometheus exporter for MongoDB metrics

AWS EBS CSI Driver

Docker Hardened Image

The AWS EBS CSI driver provides Container Storage Interface (CSI) support for Amazon EBS volumes in Kubernetes clusters. It enables dynamic and static provisioning, volume snapshots, and volume resizing.

MLflow

Docker Hardened Image

MLflow is an open-source platform for managing the machine learning lifecycle: experiment tracking, reproducible runs, model packaging, and deployment. This image provides the mlflow CLI and server runtime packaged as a hardened container for secure production deployments.

NATS

Docker Hardened Image

A high performance server for the NATS Messaging System.

BATS

Docker Hardened Image

Bash Automated Testing System - TAP-compliant testing framework for Bash

CSI Resizer

Docker Hardened Image

csi-resizer is a Kubernetes CSI sidecar component that handles online volume expansion by watching PersistentVolumeClaim objects and coordinating with CSI drivers.

Descheduler

Docker Hardened Image

Kubernetes descheduler that evicts pods to improve workload placement.

Gitea

Docker Hardened Image

Gitea is a self-hosted, all-in-one software development platform that provides Git repository hosting, code review, issue tracking, a package registry, and CI/CD through Gitea Actions.

OpenTelemetry Collector Helm chart

Docker Hardened Image

OpenTelemetry Collector is a vendor-agnostic telemetry pipeline that receives, processes, and exports traces, metrics and logs. It is used as a standalone gateway or as an agent to centralize telemetry collection and forward data to backends such as Prometheus, Tempo, Jaeger, or commercial APMs.

Kubectl Argo Rollouts Controller

Docker Hardened Image

CLI and Dashboard for the Argo Rollouts Kubernetes controller

DataHub MAE Consumer

Docker Hardened Image

The DataHub MAE Consumer is a Kafka consumer service that ingests MetadataChangeLog and PlatformEvent topics into DataHub's Elasticsearch search index and Neo4j graph store, keeping the search and lineage indices in sync with metadata changes produced by the DataHub GMS.

Memcached

Docker Hardened Image

Free & open source, high-performance, distributed memory object caching system.

OpenCost Helm chart

Docker Hardened Image

OpenCost is a Kubernetes-native cost monitoring and allocation tool.

Zot

Docker Hardened Image

Zot is a production-ready, vendor-neutral OCI image registry with full OCI standards compliance and scalability.

Trino

Docker Hardened Image

Distributed SQL query engine for big data

OpenTelemetry Operator

Docker Hardened Image

OpenTelemetry Operator is a Kubernetes operator that manages OpenTelemetry Collector and auto-instrumentation deployments. It provides custom resources for configuring collectors, instrumenting applications, and managing telemetry pipelines in Kubernetes clusters.

notation

Docker Hardened Image

Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.

Tempo Query

Docker Hardened Image

A minimal Grafana Tempo Query (Jaeger storage plugin) image

Cilium Certgen

Docker Hardened Image

A convenience tool to generate and store certificates for Cilium components, such as Cluster Mesh and Hubble Relay.

Klipper Helm

Docker Hardened Image

Shell entrypoint and Helm plugins used by the K3s and RKE2 built-in Helm controller job image.