MetalLB Controller

Docker Hardened Image

MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.

Kyverno Policy Reporter UI

Docker Hardened Image

The Kyverno Policy Reporter UI watches for PolicyReport Resources and displays information on a web based UI

ORAS

Docker Hardened Image

ORAS (OCI Registry As Storage) is a command-line tool for managing OCI artifacts in registries. It enables developers to push, pull, copy, and discover various content types beyond container images.

Piraeus CSI NFS Server

Docker Hardened Image

NFS server component for LINSTOR CSI that enables ReadWriteMany (RWX) volume access in Kubernetes using DRBD Reactor for high availability.

CDI Upload Server

Docker Hardened Image

CDI Upload Server handles the upload of virtual machine disk images into persistent volume claims

OpenTelemetry Target Allocator

Docker Hardened Image

The Target Allocator (TA) is an optional component of the OpenTelemetry Operator that discovers Prometheus targets and shards them across a fleet of OpenTelemetry Collector instances. It provides HTTP endpoints that Collectors use to fetch their assigned scrape targets (e.g. /jobs, /jobs/{job}/targets, /scrape_configs) and supports config-file and CR-based discovery.

VictoriaMetrics VMAlert

Docker Hardened Image

VictoriaMetrics VMAlert is a alerting and recording rules evaluation component for VictoriaMetrics.

ClickHouse Operator

Docker Hardened Image

Altinity's Kubernetes operator for managing ClickHouse clusters.

Apache HTTP Server

Docker Hardened Image

The Apache HTTP Server (httpd) is a robust, extensible, and widely used web server for serving static and dynamic content. This Docker Hardened Image provides a minimal, non-root runtime of Apache HTTP Server suitable for production deployments.

Grafana Operator

Docker Hardened Image

A Kubernetes operator for managing Grafana instances, dashboards, and datasources declaratively.

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

Gitea

Docker Hardened Image

Gitea is a self-hosted, all-in-one software development platform that provides Git repository hosting, code review, issue tracking, a package registry, and CI/CD through Gitea Actions.

cert-manager-istio-csr

Docker Hardened Image

Certificate signing request agent for integrating cert-manager with Istio

Apache NiFi

Docker Hardened Image

A data integration and workflow automation tool that supports powerful and scalable directed graphs of data routing, transformation, and mediation logic.

k8ssandra-system-logger

Docker Hardened Image

k8ssandra-system-logger packages Vector (vectordotdev/vector) as a small sidecar image that tails Cassandra system logs and writes them to stdout. It is designed to run as a nonroot sidecar alongside Cassandra to surface /var/log/cassandra/*.log to container stdout for collection by cluster logging agents or centralized logging systems.

API Declarative CLI (ADC)

Docker Hardened Image

ADC is a command line utility that interfaces with API7 Enterprise and Apache APISIX Admin APIs.

kubernetes-pause

Docker Hardened Image

kubernetes-pause is the minimal Kubernetes infrastructure container used to hold a pod's shared namespaces.

Grafana Rollout Operator

Docker Hardened Image

A Kubernetes operator for coordinating the rollout of Grafana pods between different StatefulSets

VersityGW

Docker Hardened Image

VersityGW is a high-performance S3 translation service.

CSI External Health Monitor Controller

Docker Hardened Image

csi-external-health-monitor-controller is a Kubernetes CSI sidecar component that monitors the health of CSI volumes and reports anomalies to the Kubernetes API.

drbd-reactor

Docker Hardened Image

A user-space daemon that monitors and manages DRBD resources

OpenCost UI

Docker Hardened Image

Web-based UI for OpenCost Kubernetes cost monitoring

Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

Jenkins Inbound Agent

Docker Hardened Image

Jenkins Inbound Agent is a specialized Docker image for Kubernetes and containerized environments. It automatically connects to a Jenkins controller using environment variables, making it ideal for dynamic agent provisioning in Kubernetes clusters and CI/CD pipelines.

Piraeus HA Controller

Docker Hardened Image

High Availability Controller for stateful workloads using storage provisioned by Piraeus. Speeds up failover process and monitors DRBD resources.

KServe Controller

Docker Hardened Image

A Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks.

CDI Controller

Docker Hardened Image

CDI Controller manages the lifecycle of import, upload, and clone operations for virtual machine disk images