kubernetes-pause

Docker Hardened Image

kubernetes-pause is the minimal Kubernetes infrastructure container used to hold a pod's shared namespaces.

Polaris

Docker Hardened Image

Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.

Docker Scout CLI

Docker Hardened Image

Command-line interface for Docker Scout providing container image analysis, vulnerability scanning, and policy evaluation capabilities for securing your software supply chain.

ClickHouse Operator

Docker Hardened Image

Altinity's Kubernetes operator for managing ClickHouse clusters.

Piraeus CSI NFS Server

Docker Hardened Image

NFS server component for LINSTOR CSI that enables ReadWriteMany (RWX) volume access in Kubernetes using DRBD Reactor for high availability.

Telegraf

Docker Hardened Image

Telegraf is a plugin-driven server agent for collecting and reporting metrics.

piwik

Docker Official Image

DEPRECATED; use "matomo" instead

crate

Docker Official Image

CrateDB is an open-source, distributed SQL database empowering you to turn data into business value.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

Velero Helm chart

Docker Hardened Image

Velero is an open source tool to safely back up and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes.

MetalLB Controller

Docker Hardened Image

MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.

aerospike

Docker Official Image

Aerospike – the reliable, high performance, distributed database optimized for flash and RAM.

StatsD Exporter

Docker Hardened Image

A Prometheus exporter that receives StatsD-style metrics and exports them as Prometheus metrics via configurable mapping rules and tagging formats.

Kyverno Policy Reporter UI

Docker Hardened Image

The Kyverno Policy Reporter UI watches for PolicyReport Resources and displays information on a web based UI

OpenTelemetry Target Allocator

Docker Hardened Image

The Target Allocator (TA) is an optional component of the OpenTelemetry Operator that discovers Prometheus targets and shards them across a fleet of OpenTelemetry Collector instances. It provides HTTP endpoints that Collectors use to fetch their assigned scrape targets (e.g. /jobs, /jobs/{job}/targets, /scrape_configs) and supports config-file and CR-based discovery.

CDI Upload Server

Docker Hardened Image

CDI Upload Server handles the upload of virtual machine disk images into persistent volume claims

dynatrace/dynatrace-operator

Dynatrace

Automate Kubernetes observability with Dynatrace

Prometheus Adapter

Docker Hardened Image

Prometheus Adapter implements the custom.metrics.k8s.io and external.metrics.k8s.io APIs for Kubernetes HPA and VPA, exposing metrics from Prometheus.

Redis MCP Server

Docker Hardened Image

A Model Context Protocol server that lets AI agents interact with Redis databases using natural language.

Ollama

Docker Hardened Image

Run and serve large language models locally over an HTTP API (CPU inference).

Grafana Operator

Docker Hardened Image

A Kubernetes operator for managing Grafana instances, dashboards, and datasources declaratively.

MySQL Server Exporter

Docker Hardened Image

A Prometheus exporter for MySQL Server (mysqld_exporter) exposing server status and performance metrics.

OpenSearch Helm chart

Docker Hardened Image

OpenSearch is a distributed, RESTful search and analytics engine designed for a wide range of use cases.

Goldilocks

Docker Hardened Image

A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.

Confluent Platform Kafka

Docker Hardened Image

Apache Kafka packaged for Confluent Platform, configured through KAFKA_* environment variables by the Confluent container launch scripts.

Karpenter

Docker Hardened Image

Open-source Kubernetes node autoscaler built for flexibility, performance, and simplicity

newrelic/newrelic-fluentbit-output

New Relic

Base container with new relic output plugin for use with our k8 integration and custom deployments.

amazon/amazon-ecs-agent

Amazon Web Services

Amazon Elastic Container Service Agent

vSphere CSI Driver

Docker Hardened Image

Container Storage Interface (CSI) driver for VMware vSphere. Provisions and attaches vSphere volumes for Kubernetes workloads, running as the CSI controller plugin and as the node plugin that formats and mounts volumes.