Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.

MongoDB Controllers for Kubernetes (MCK)

Docker Hardened Image

A Kubernetes operator that enables users to run MongoDB in Kubernetes

Kyverno Reports Server

Docker Hardened Image

Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.

vSphere CSI Driver

Docker Hardened Image

Container Storage Interface (CSI) driver for VMware vSphere. Provisions and attaches vSphere volumes for Kubernetes workloads, running as the CSI controller plugin and as the node plugin that formats and mounts volumes.

WBITT Network Multitool

Docker Hardened Image

A multi-arch multitool for container and network testing and troubleshooting. Includes a comprehensive set of networking utilities and a minimal nginx web server for easy access and testing. The -extra flavor includes additional tools for advanced networking, database connectivity, and security testing.

Varnish Cache

Docker Hardened Image

Varnish Cache is a high-performance HTTP accelerator and caching reverse proxy designed to speed up web applications by caching content in memory and serving it at very high throughput.

Valkey Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Valkey clusters. Handles provisioning, scaling, upgrades, and failure remediation for Valkey workloads running on Kubernetes.

GitLab Shell

Docker Hardened Image

GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.

Cass Config Builder

Docker Hardened Image

Configuration templating engine for Apache Cassandra, used by the DataStax Kubernetes Operator.

neurodebian

Docker Official Image

NeuroDebian provides neuroscience research software for Debian, Ubuntu, and other derivatives.

Registration Operator

Docker Hardened Image

Kubernetes operator for managing Open Cluster Management hub and spoke components.

ChartMuseum

Docker Hardened Image

An open-source Helm Chart Repository server with support for cloud and local storage backends.

Placement

Docker Hardened Image

A Kubernetes controller that makes placement decisions for workloads across managed clusters based on Placement APIs.

SpiceDB Operator

Docker Hardened Image

SpiceDB Operator manages SpiceDB authorization database instances in Kubernetes via SpiceDBCluster custom resources, handling provisioning, configuration, and version upgrades.

Actions Runner Controller

Docker Hardened Image

Kubernetes controller that orchestrates ephemeral self-hosted GitHub Actions runners using autoscaling runner scale sets.

JupyterHub K8s Singleuser Sample

Docker Hardened Image

A minimal JupyterLab single-user server image for JupyterHub on Kubernetes.

Node Problem Detector

Docker Hardened Image

A Kubernetes daemon that detects node-level problems — kernel issues, hardware faults, and runtime failures — and reports them to the API server as Events and NodeConditions.

Nginx Exporter

Docker Hardened Image

Nginx exporter makes it possible to monitor Nginx or Nginx Plus with Prometheus by exposing metrics in Prometheus format.

WireMock GUI

Docker Hardened Image

WireMock with an Angular admin webapp; a community fork by Christopher Holomek that adds an interactive browser UI for managing stubs, request logs, and recordings.

Apache Superset

Docker Hardened Image

Apache Superset is a modern data exploration and visualization platform.

NetBox

Docker Hardened Image

NetBox is the open-source network infrastructure source of truth — IPAM and DCIM in one Django application.

Eclipse Mosquitto

Docker Hardened Image

Eclipse Mosquitto is an open-source MQTT message broker implementing MQTT 5.0, 3.1.1 and 3.1. This Docker Hardened Image provides the Mosquitto broker and client utilities in a minimal, security-focused container with configuration at /mosquitto/config/mosquitto.conf.

GitLab Workhorse

Docker Hardened Image

GitLab Workhorse is the smart reverse proxy that sits in front of GitLab, handling resource-intensive HTTP requests such as file uploads and downloads, Git operations, and archive downloads.

Cilium startup script

Docker Hardened Image

Cilium startup script

netdata/netdata

Netdata

The official image for monitoring systems, containers and applications with Netdata.

Cert Exporter

Docker Hardened Image

A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

newrelic/nri-ecs

New Relic

New Relic AWS ECS integration

Local Path Provisioner

Docker Hardened Image

Kubernetes controller that dynamically provisions local persistent volumes backed by node-local storage using hostPath or local volume types.