Virt Operator

Docker Hardened Image

Virt Operator deploys and manages the KubeVirt virtualization infrastructure in Kubernetes

Virt Export Proxy

Docker Hardened Image

Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt

grafana/loki

Grafana Labs

Loki - Cloud Native Log Aggregation by Grafana

AWS EFS CSI Driver

Docker Hardened Image

The AWS EFS CSI driver provides Container Storage Interface (CSI) support for Amazon EFS file systems in Kubernetes clusters. It enables dynamic and static provisioning of EFS volumes.

Karpenter

Docker Hardened Image

karpenter is an efficient node manager for kubernetes clusters

amazon/aws-for-fluent-bit

Amazon Web Services

Fluent Bit image with plugins for AWS

DataHub Actions

Docker Hardened Image

Event-driven framework that reacts to real-time changes in DataHub's metadata graph by polling Kafka topics and invoking pluggable actions (Slack/Teams notifications, doc/tag propagation, executor for UI-triggered ingestion).

DataHub Ingestion

Docker Hardened Image

DataHub metadata ingestion CLI for emitting metadata from data sources, BI tools, and data warehouses into DataHub.

Velero Plugin for AWS

Docker Hardened Image

Plugin to support running Velero on AWS.

Harbor Core

Docker Hardened Image

Harbor Core is the main API server component of Harbor, an open source trusted cloud native registry project that stores, signs, and scans content.

Argo Rollouts

Docker Hardened Image

Argo Rollouts is a Kubernetes controller and set of CRDs which provide advanced deployment capabilities

AWS EBS CSI Driver

Docker Hardened Image

The AWS EBS CSI driver provides Container Storage Interface (CSI) support for Amazon EBS volumes in Kubernetes clusters. It enables dynamic and static provisioning, volume snapshots, and volume resizing.

notation

Docker Hardened Image

Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.

Trigger.dev

Docker Hardened Image

Self-hosted Trigger.dev webapp: an open-source background jobs and AI workflow platform for TypeScript, running on Postgres with optional Redis and ClickHouse.

Kubectl Argo Rollouts Controller

Docker Hardened Image

CLI and Dashboard for the Argo Rollouts Kubernetes controller

SonarQube

Docker Hardened Image

SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code.

Image Reflector Controller

Docker Hardened Image

Flux CD component that scans container image repositories and reflects discovered image tags into Kubernetes resources, enabling policy-driven image tag selection for automated updates.

Image Automation Controller

Docker Hardened Image

Flux CD component that automates container image updates by committing image tag changes back to Git repositories when new image versions are detected.

Flux CLI

Docker Hardened Image

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration and automating updates to configuration when there is new code to deploy.

Klipper Helm

Docker Hardened Image

Shell entrypoint and Helm plugins used by the K3s and RKE2 built-in Helm controller job image.

Gatekeeper

Docker Hardened Image

Policy Controller for Kubernetes, built on Open Policy Agent.

portainer/agent

Portainer.io

Connect your Kubernetes, Docker and Podman environments to Portainer.

portainer/portainer-ce

Portainer.io

Portainer CE - a lightweight service delivery platform for containerized applications

DataHub Upgrade

Docker Hardened Image

Run-to-completion batch container that applies DataHub schema migrations, rebuilds Elasticsearch indices, and emits upgrade readiness signals before the rest of the DataHub stack starts.

lacework/datacollector

Lacework Inc

Lacework is cloud security for AWS, Azure, GCP and other public and private cloud.

dynatrace/dynatrace-operator

Dynatrace

Automate Kubernetes observability with Dynatrace

nginxinc/nginx-unprivileged

NGINX Inc.

Unprivileged NGINX Dockerfiles

AWS EKS Pod Identity Agent

Docker Hardened Image

The AWS EKS Pod Identity Agent runs on Amazon EKS nodes and exchanges Kubernetes service account tokens for temporary AWS IAM credentials, providing pods with IAM roles without using IRSA or instance profiles.

dynatrace/oneagent

Dynatrace

Non-immutable installer image for Dynatrace OneAgent

Unleash

Docker Hardened Image

Unleash is an open-source feature flag management platform.