Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

GitLab Runner

Docker Hardened Image

GitLab Runner is the open source project that is used to run your CI/CD jobs and send the results back to GitLab.

Uptime Kuma

Docker Hardened Image

Uptime Kuma is a open-source, self-hosted monitoring tool.

Istio Pilot

Docker Hardened Image

Istio control plane component that configures proxies and handles service discovery

ClickHouse

Docker Hardened Image

ClickHouse is the fastest and most resource efficient OSS database for real-time apps and analytics.

Argo Events

Docker Hardened Image

Argo Events is an event-driven Workflow Automation Framework

clamav

Docker Hardened Image

ClamAV is an open source (GPLv2) anti-virus toolkit, designed especially for e-mail scanning on mail gateways.

kube-state-metrics

Docker Hardened Image

an add-on agent to generate and expose cluster-level metrics

OAuth2 Proxy

Docker Hardened Image

A reverse proxy that provides authentication using OAuth2 and OIDC providers.

Virt Operator

Docker Hardened Image

Virt Operator deploys and manages the KubeVirt virtualization infrastructure in Kubernetes

Scalable datastore for metrics, events, and real-time analytics

Cilium Hubble Relay

Docker Hardened Image

Relay server for aggregating and exposing Hubble observability data

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

Kubernetes Proxy (kube-proxy)

Docker Hardened Image

Maintains network rules on nodes to enable service virtual IPs and load balancing. kube-proxy reflects services defined in the Kubernetes API and maintains network rules on nodes to implement service behavior.

Contour

Docker Hardened Image

Contour is a Kubernetes ingress controller using Envoy proxy to provide dynamic configuration updates and high performance load balancing. It supports Ingress, HTTPProxy, and Gateway API.

Grist

Docker Hardened Image

Grist relational spreadsheet

Virt Export Proxy

Docker Hardened Image

Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt

JRuby

Docker Hardened Image

JRuby is an implementation of the Ruby programming language that runs on the Java Virtual Machine (JVM).

K8ssandra Operator

Docker Hardened Image

Kubernetes operator for managing multi-cluster Apache Cassandra deployments with K8ssandra. Provides automated lifecycle management, backup/restore, and monitoring capabilities.

Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

Reloader

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

Grafana Image Renderer

Docker Hardened Image

Headless browser service for rendering Grafana panels and dashboards as PNG images and PDF documents using Chromium.

Azure Functions (Node.js)

Docker Hardened Image

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

Etcd

Docker Hardened Image

Etcd is a strongly consistent, distributed key-value store that provides reliable data storage

Ceph CSI

Docker Hardened Image

Container Storage Interface driver for Ceph-backed RBD, CephFS, NFS, and NVMe-oF workloads on Kubernetes.

Prometheus Pushgateway

Docker Hardened Image

A push gateway for Prometheus that accepts metrics from ephemeral or batch jobs and exposes them for scraping by Prometheus.

Flyway

Docker Hardened Image

Flyway is an open-source database migration tool that simplifies the evolution of your database schema.

Cassandra Reaper

Docker Hardened Image

Cassandra Reaper is a centralized, stateful, highly available tool for running Apache Cassandra repairs against single or multi-site clusters.

Apache Druid

Docker Hardened Image

Apache Druid is a high performance real-time analytics database designed for workflows where fast queries and ingest really matter.

Kubernetes Controller Manager (kube-controller-manager)

Docker Hardened Image

Runs core control loops in the Kubernetes control plane. kube-controller-manager runs controller processes that regulate the state of the cluster and perform routine tasks.