OpenTelemetry Operator

Docker Hardened Image

OpenTelemetry Operator is a Kubernetes operator that manages OpenTelemetry Collector and auto-instrumentation deployments. It provides custom resources for configuring collectors, instrumenting applications, and managing telemetry pipelines in Kubernetes clusters.

Grafana Loki Helm chart

Docker Hardened Image

Loki - Cloud Native Log Aggregation by Grafana

Trigger.dev

Docker Hardened Image

Self-hosted Trigger.dev webapp: an open-source background jobs and AI workflow platform for TypeScript, running on Postgres with optional Redis and ClickHouse.

CSI Snapshotter

Docker Hardened Image

csi-snapshotter is a Kubernetes CSI sidecar component that manages volume snapshots and restore operations by watching VolumeSnapshot objects and coordinating with CSI drivers.

MLflow

Docker Hardened Image

MLflow is an open-source platform for managing the machine learning lifecycle: experiment tracking, reproducible runs, model packaging, and deployment. This image provides the mlflow CLI and server runtime packaged as a hardened container for secure production deployments.

Netdata Agent SD

Docker Hardened Image

Kubernetes service discovery for the Netdata monitoring agent. Watches Pods and Services to auto-generate data collection configurations.

Kubectl Argo Rollouts Controller

Docker Hardened Image

CLI and Dashboard for the Argo Rollouts Kubernetes controller

Kubernetes API Server (kube-apiserver)

Docker Hardened Image

Front end for the Kubernetes control plane. kube-apiserver exposes the Kubernetes API over HTTP(S), performs request validation, authentication and authorization, runs admission control, and persists cluster state to an etcd backend.

SonarQube

Docker Hardened Image

SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code.

Image Reflector Controller

Docker Hardened Image

Flux CD component that scans container image repositories and reflects discovered image tags into Kubernetes resources, enabling policy-driven image tag selection for automated updates.

Image Automation Controller

Docker Hardened Image

Flux CD component that automates container image updates by committing image tag changes back to Git repositories when new image versions are detected.

DataHub MAE Consumer

Docker Hardened Image

The DataHub MAE Consumer is a Kafka consumer service that ingests MetadataChangeLog and PlatformEvent topics into DataHub's Elasticsearch search index and Neo4j graph store, keeping the search and lineage indices in sync with metadata changes produced by the DataHub GMS.

CSI Attacher

Docker Hardened Image

csi-attacher is a Kubernetes CSI sidecar component that manages volume attachment and detachment operations by watching VolumeAttachment objects and coordinating with CSI drivers.

Grafana Loki Helm Test

Docker Hardened Image

A collection of go tests that test if a Loki canary is running correctly.

Tempo Query

Docker Hardened Image

A minimal Grafana Tempo Query (Jaeger storage plugin) image

VictoriaMetrics VMInsert

Docker Hardened Image

VictoriaMetrics VMInsert is the ingestion component for a VictoriaMetrics cluster.

Cilium Certgen

Docker Hardened Image

A convenience tool to generate and store certificates for Cilium components, such as Cluster Mesh and Hubble Relay.

Flux CLI

Docker Hardened Image

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration and automating updates to configuration when there is new code to deploy.

Kibana

Docker Hardened Image

Kibana gives shape to any kind of data — structured and unstructured — indexed in Elasticsearch.

MongoDB Exporter

Docker Hardened Image

A Prometheus exporter for MongoDB metrics

NGINX Ingress Controller

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

Zot

Docker Hardened Image

Zot is a production-ready, vendor-neutral OCI image registry with full OCI standards compliance and scalability.

JMX Exporter

Docker Hardened Image

The JMX Exporter is a collector to capture JMX MBean values.

Klipper Helm

Docker Hardened Image

Shell entrypoint and Helm plugins used by the K3s and RKE2 built-in Helm controller job image.

Gatekeeper

Docker Hardened Image

Policy Controller for Kubernetes, built on Open Policy Agent.

Tailscale

Docker Hardened Image

Tailscale lets you securely connect devices and containers without exposing them to the public internet.

Azul Platform Prime

Docker Hardened Image

Azul Platform Prime delivers optimizes Java application performance and drives cloud cost efficiency.

PgBouncer

Docker Hardened Image

Lightweight connection pooler for PostgreSQL

k8ssandra-client

Docker Hardened Image

kubectl plugin for managing K8ssandra clusters

X.509 Certificate Exporter

Docker Hardened Image

A Prometheus exporter to monitor x509 certificates expiration in Kubernetes clusters or standalone