AWS VPC CNI Helm chart

Docker Hardened Image

The AWS VPC CNI plugin provides native Amazon VPC networking for Kubernetes pods on Amazon EKS and EC2 nodes.

Google CAS Issuer for cert-manager

Docker Hardened Image

cert-manager external issuer that signs certificates with Google Cloud Certificate Authority Service

GitLab Runner Helm chart

Docker Hardened Image

GitLab Runner runs your CI/CD jobs and sends the results back to GitLab.

Grafana PDC Agent

Docker Hardened Image

Private Datasource Connect agent that opens a reverse SSH tunnel so Grafana Cloud can query data sources on a private network.

Dev Containers Base

Docker Hardened Image

A minimal base image for development containers, with a non-root vscode user, sudo, git, zsh and the common tooling IDEs expect.

AWS EFS CSI Driver Helm chart

Docker Hardened Image

The AWS EFS CSI Driver lets Kubernetes workloads use Amazon EFS file systems as persistent volumes, with static and dynamic provisioning.

Datadog Agent

Docker Hardened Image

The Datadog Agent collects metrics, traces, and logs from your infrastructure and applications and sends them to the Datadog platform.

Portieris

Docker Hardened Image

A Kubernetes admission controller that enforces image trust policies.

Shell

Docker Hardened Image

A Bash development sandbox with Docker, Git, and Python on Docker Hardened Images

Forklift Operator Bundle

Docker Hardened Image

OLM operator bundle image carrying the Forklift (Migration Toolkit for Virtualization) operator manifests and metadata.

go-httpbin

Docker Hardened Image

A Go port of httpbin, an HTTP request and response service for testing HTTP clients, libraries, and proxies.

ACK EKS Controller

Docker Hardened Image

AWS Controllers for Kubernetes (ACK) controller that manages Amazon EKS clusters, node groups and related resources as Kubernetes custom resources.

Claude Code

Docker Hardened Image

Anthropic Claude Code agent on Docker Hardened Images for Docker Sandboxes

Kubeflow Access Management

Docker Hardened Image

Kubeflow API server that manages per-namespace user access through RoleBindings and Istio AuthorizationPolicies

Kubeflow PVCViewer Controller

Docker Hardened Image

Kubernetes operator that launches file browser viewers for PersistentVolumeClaims in Kubeflow Notebooks.

Ansible

Docker Hardened Image

Batteries-included Ansible community package for running playbooks and ad-hoc tasks from a minimal controller image.

NATS JetStream Controller

Docker Hardened Image

Kubernetes controller that reconciles NATS JetStream Stream and Consumer custom resources onto a NATS server.

Codex

Docker Hardened Image

OpenAI Codex CLI on Docker Hardened Images for Docker Sandboxes

Open Policy Agent Envoy

Docker Hardened Image

Open Policy Agent with the Envoy External Authorization gRPC plugin, enforcing policies for Envoy-based service meshes and proxies.

Rancher PushProx Client

Docker Hardened Image

Client for PushProx, which lets Prometheus scrape targets behind NAT and firewalls through a proxy

Rancher PushProx

Docker Hardened Image

A proxy and client that let Prometheus scrape targets behind NAT or firewalls while keeping the pull model.

Snipe-IT

Docker Hardened Image

Open-source asset and IT inventory management web application.

AWS Controllers for Kubernetes (ACK) SQS controller

Docker Hardened Image

Manages Amazon SQS queues from Kubernetes custom resources

Kubeflow Notebook Controller

Docker Hardened Image

Kubernetes controller that reconciles Kubeflow Notebook custom resources into StatefulSets and Services for notebook servers.

Crossplane Provider Family AWS

Docker Hardened Image

The Crossplane provider for Amazon Web Services. It reconciles AWS provider configurations for the provider-family-aws Crossplane package.

ACK SNS Controller

Docker Hardened Image

The AWS Controllers for Kubernetes (ACK) SNS controller manages Amazon SNS topics, subscriptions, platform applications and platform endpoints as Kubernetes resources.

Apollo MCP Server

Docker Hardened Image

Apollo MCP Server exposes a GraphQL API to AI agents over the Model Context Protocol — serving GraphQL operations from local files, a persisted-query manifest, or an Apollo GraphOS graph as MCP tools, with optional schema introspection and search, over stdio or streamable HTTP.

Linkerd Tap

Docker Hardened Image

The Linkerd viz tap, which streams live request traffic from meshed pods for the dashboard and CLI.

Script Exporter

Docker Hardened Image

Prometheus exporter to execute scripts and collect metrics from the output or the exit status.

OpenSpeedTest

Docker Hardened Image

Self-hosted HTML5 network speed test served by nginx on HTTP and HTTPS.