Virt Operator

Docker Hardened Image

Virt Operator deploys and manages the KubeVirt virtualization infrastructure in Kubernetes

Argo Events

Docker Hardened Image

Argo Events is an event-driven Workflow Automation Framework

Virt Export Proxy

Docker Hardened Image

Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt

grafana/loki

Grafana Labs

Loki - Cloud Native Log Aggregation by Grafana

Argo CD Image Updater Helm chart

Docker Hardened Image

A tool to automatically update container images of Kubernetes workloads managed by Argo CD.

Karpenter

Docker Hardened Image

karpenter is an efficient node manager for kubernetes clusters

AWS EFS CSI Driver

Docker Hardened Image

The AWS EFS CSI driver provides Container Storage Interface (CSI) support for Amazon EFS file systems in Kubernetes clusters. It enables dynamic and static provisioning of EFS volumes.

amazon/aws-for-fluent-bit

Amazon Web Services

Fluent Bit image with plugins for AWS

DataHub Actions

Docker Hardened Image

Event-driven framework that reacts to real-time changes in DataHub's metadata graph by polling Kafka topics and invoking pluggable actions (Slack/Teams notifications, doc/tag propagation, executor for UI-triggered ingestion).

DataHub Ingestion

Docker Hardened Image

DataHub metadata ingestion CLI for emitting metadata from data sources, BI tools, and data warehouses into DataHub.

Velero Plugin for AWS

Docker Hardened Image

Plugin to support running Velero on AWS.

Harbor Core

Docker Hardened Image

Harbor Core is the main API server component of Harbor, an open source trusted cloud native registry project that stores, signs, and scans content.

Argo Rollouts

Docker Hardened Image

Argo Rollouts is a Kubernetes controller and set of CRDs which provide advanced deployment capabilities

KEDA Helm chart

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

AWS EBS CSI Driver

Docker Hardened Image

The AWS EBS CSI driver provides Container Storage Interface (CSI) support for Amazon EBS volumes in Kubernetes clusters. It enables dynamic and static provisioning, volume snapshots, and volume resizing.

notation

Docker Hardened Image

Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.

Trigger.dev

Docker Hardened Image

Self-hosted Trigger.dev webapp: an open-source background jobs and AI workflow platform for TypeScript, running on Postgres with optional Redis and ClickHouse.

Kubectl Argo Rollouts Controller

Docker Hardened Image

CLI and Dashboard for the Argo Rollouts Kubernetes controller

SonarQube

Docker Hardened Image

SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code.

Image Reflector Controller

Docker Hardened Image

Flux CD component that scans container image repositories and reflects discovered image tags into Kubernetes resources, enabling policy-driven image tag selection for automated updates.

Image Automation Controller

Docker Hardened Image

Flux CD component that automates container image updates by committing image tag changes back to Git repositories when new image versions are detected.

Flux CLI

Docker Hardened Image

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration and automating updates to configuration when there is new code to deploy.

Klipper Helm

Docker Hardened Image

Shell entrypoint and Helm plugins used by the K3s and RKE2 built-in Helm controller job image.

Gatekeeper

Docker Hardened Image

Policy Controller for Kubernetes, built on Open Policy Agent.

portainer/agent

Portainer.io

Connect your Kubernetes, Docker and Podman environments to Portainer.

portainer/portainer-ce

Portainer.io

Portainer CE - a lightweight service delivery platform for containerized applications

DataHub Upgrade

Docker Hardened Image

Run-to-completion batch container that applies DataHub schema migrations, rebuilds Elasticsearch indices, and emits upgrade readiness signals before the rest of the DataHub stack starts.

lacework/datacollector

Lacework Inc

Lacework is cloud security for AWS, Azure, GCP and other public and private cloud.

dynatrace/dynatrace-operator

Dynatrace

Automate Kubernetes observability with Dynatrace

nginxinc/nginx-unprivileged

NGINX Inc.

Unprivileged NGINX Dockerfiles