Trust Manager Package

Docker Hardened Image

A trust manager package image that provides Debian CA certificates for use as an init container with cert-manager trust-manager.

Local Path Provisioner

Docker Hardened Image

Kubernetes controller that dynamically provisions local persistent volumes backed by node-local storage using hostPath or local volume types.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.

SpiceDB Operator

Docker Hardened Image

SpiceDB Operator manages SpiceDB authorization database instances in Kubernetes via SpiceDBCluster custom resources, handling provisioning, configuration, and version upgrades.

Node Problem Detector

Docker Hardened Image

A Kubernetes daemon that detects node-level problems — kernel issues, hardware faults, and runtime failures — and reports them to the API server as Events and NodeConditions.

Valkey Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Valkey clusters. Handles provisioning, scaling, upgrades, and failure remediation for Valkey workloads running on Kubernetes.

WireMock

Docker Hardened Image

Flexible API mocking tool for service virtualization that enables developers to simulate HTTP-based APIs for testing purposes.

Git MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to read, search, and manipulate Git repositories programmatically via LLMs.

GitLab Workhorse

Docker Hardened Image

GitLab Workhorse is the smart reverse proxy that sits in front of GitLab, handling resource-intensive HTTP requests such as file uploads and downloads, Git operations, and archive downloads.

Apigee Edge Microgateway

Docker Hardened Image

Apigee Edge Microgateway is a secure, HTTP-based message processor for APIs.

ChartMuseum

Docker Hardened Image

An open-source Helm Chart Repository server with support for cloud and local storage backends.

Calico CTL

Docker Hardened Image

Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.

MongoDB Controllers for Kubernetes (MCK)

Docker Hardened Image

A Kubernetes operator that enables users to run MongoDB in Kubernetes

SPIFFE Helper

Docker Hardened Image

Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.

Git-sync

Docker Hardened Image

git-sync is a sidecar that pulls a git repository into a local directory, keeping it synced to a remote.

Jaeger Ingester

Docker Hardened Image

Jaeger v2 unified binary preconfigured to ingest spans from Kafka into a storage backend.

KServe Agent

Docker Hardened Image

KServe Agent is a component that manages model serving workloads in KServe.

Time MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools for time queries and timezone conversions for LLMs.

Node Feature Discovery

Docker Hardened Image

Node feature discovery for Kubernetes.

Apache Flink Kubernetes Operator

Docker Hardened Image

Kubernetes operator for managing Apache Flink applications and their lifecycle.

NetBox

Docker Hardened Image

NetBox is the open-source network infrastructure source of truth — IPAM and DCIM in one Django application.

Calico Whisker Backend

Docker Hardened Image

Backend API service for the Calico Whisker network flow visualization UI.

Apache Spark Kubernetes Operator

Docker Hardened Image

Kubernetes operator for managing Apache Spark applications and clusters on Kubernetes

KServe Router

Docker Hardened Image

The routing component for KServe inference graphs, enabling complex model serving patterns with intelligent traffic routing.

Playwright

Docker Hardened Image

End-to-end browser automation and testing framework with bundled Chromium-compatible, Firefox, and WebKit browsers

NVIDIA DCGM Exporter

Docker Hardened Image

NVIDIA Data Center GPU Manager exporter for Prometheus. Exposes GPU telemetry (utilization, memory, temperature, power, profiling) over an HTTP /metrics endpoint via the DCGM library.

Actions Runner Controller

Docker Hardened Image

Kubernetes controller that orchestrates ephemeral self-hosted GitHub Actions runners using autoscaling runner scale sets.