CDI Importer

Docker Hardened Image

CDI Importer imports virtual machine disk images into persistent volume claims in Kubernetes

DRBD 9

Docker Hardened Image

DRBD (Distributed Replicated Block Device) kernel module and user-space utilities

Piraeus CSI

Docker Hardened Image

CSI (Container Storage Interface) driver for LINSTOR/Piraeus that enables Kubernetes to provision persistent volumes using LINSTOR storage.

Azul Platform Prime

Docker Hardened Image

Azul Platform Prime delivers optimizes Java application performance and drives cloud cost efficiency.

DataHub Frontend

Docker Hardened Image

The Play Framework web UI for DataHub, the open-source metadata platform for data discovery, observability, and governance.

GitLab Runner Helper

Docker Hardened Image

GitLab Runner Helper handles git operations, artifact upload/download, and cache management for GitLab CI/CD jobs.

JupyterHub K8s Hub

Docker Hardened Image

JupyterHub hub component for Zero to JupyterHub on Kubernetes, with Kubespawner and authenticators.

Keycloak Helm chart

Docker Hardened Image

Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.

Unleash

Docker Hardened Image

Unleash is an open-source feature flag management platform.

K8s Device Plugin

Docker Hardened Image

NVIDIA device plugin for Kubernetes that exposes GPUs to the Kubernetes scheduler, provides GPU health monitoring, and supports MIG, MPS, time-slicing, and CDI.

VictoriaMetrics VMAgent

Docker Hardened Image

VictoriaMetrics VMAgent is an agent that helps you collect metrics from various sources, relabel and filter the collected metrics and store them in VictoriaMetrics.

DataHub MCE Consumer

Docker Hardened Image

The DataHub MCE Consumer is a Kafka consumer service that processes MetadataChangeProposal events from upstream sources (ingestion CLI, actions framework) and applies them to DataHub's metadata storage layer via the GMS API, writing failures back to the FailedMetadataChangeProposal topic for retry.

trust-manager

Docker Hardened Image

cert-manager trust-manager manages trust bundles in Kubernetes and OpenShift clusters

A Prometheus exporter that receives access logs from nginx through the syslog protocol and converts them into metrics.

Prometheus NATS Exporter

Docker Hardened Image

A Prometheus exporter for NATS metrics, exposing server monitoring information including connections, subscriptions, routes, and JetStream statistics.

Percona XtraBackup

Docker Hardened Image

Percona XtraBackup is an open-source hot backup utility for MySQL that performs non-blocking backups for InnoDB, XtraDB, and MyISAM databases.

MetalLB Speaker

Docker Hardened Image

MetalLB speaker component announces LoadBalancer services to the network using Layer 2 ARP or BGP routing protocols on bare metal Kubernetes clusters.

VictoriaMetrics VMStorage

Docker Hardened Image

VictoriaMetrics VMStorage is the ingestion component for a VictoriaMetrics cluster.

Prometheus Node Exporter Helm chart

Docker Hardened Image

Exports hardware- and OS-level metrics from a host for scraping by Prometheus.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

Thanos Helm Chart

Docker Hardened Image

Thanos is a highly available metrics system that offers long term storage capabilities.

OAuth2 Proxy Helm chart

Docker Hardened Image

A reverse proxy that provides authentication using OAuth2 and OIDC providers.

Prometheus Operator Admission Webhook

Docker Hardened Image

Kubernetes webhook for managing Prometheus.

regctl

Docker Hardened Image

regctl is a CLI interface for Docker and OCI registries. It provides efficient registry operations without requiring a container runtime, supporting multi-platform images, OCI artifacts, and content manipulation.

Istio CNI Helm chart

Docker Hardened Image

Helm chart for deploying the Istio CNI plugin.

K8ssandra Medusa

Docker Hardened Image

Apache Cassandra backup and restore tool

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Gitleaks

Docker Hardened Image

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Written in Go.

GitLab Toolbox

Docker Hardened Image

GitLab Toolbox provides the backup, restore, and Rails maintenance tooling (backup-utility, gitlab-rake, gitlab-rails) for a GitLab installation.