Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

KServe Controller

Docker Hardened Image

A Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks.

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

AWS Private CA Issuer

Docker Hardened Image

AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.

VersityGW

Docker Hardened Image

VersityGW is a high-performance S3 translation service.

Kured

Docker Hardened Image

Kubernetes Reboot Daemon

CDI Operator

Docker Hardened Image

CDI Operator deploys and manages the Containerized Data Importer infrastructure components in Kubernetes

Grafana Beyla

Docker Hardened Image

Grafana Beyla is an eBPF-based application auto-instrumentation tool that captures OpenTelemetry traces and metrics for web services and network flows without code changes.

drbd-reactor

Docker Hardened Image

A user-space daemon that monitors and manages DRBD resources

Calico CSI

Docker Hardened Image

Calico CSI driver for secure connections from Kubernetes pods to local daemons.

Kubernetes Cloud Controller Manager (cloud-controller-manager)

Docker Hardened Image

Runs cloud-provider-specific control loops in the Kubernetes control plane. cloud-controller-manager embeds the cloud-specific control loops that integrate a Kubernetes cluster with the underlying cloud provider's APIs.

SpiceDB

Docker Hardened Image

An open source, Google Zanzibar-inspired database for fine-grained authorization.

Redis MCP Server

Docker Hardened Image

A Model Context Protocol server that lets AI agents interact with Redis databases using natural language.

CDI Controller

Docker Hardened Image

CDI Controller manages the lifecycle of import, upload, and clone operations for virtual machine disk images

Apache NiFi

Docker Hardened Image

A data integration and workflow automation tool that supports powerful and scalable directed graphs of data routing, transformation, and mediation logic.

CSI External Health Monitor Controller

Docker Hardened Image

csi-external-health-monitor-controller is a Kubernetes CSI sidecar component that monitors the health of CSI volumes and reports anomalies to the Kubernetes API.

Jenkins Inbound Agent

Docker Hardened Image

Jenkins Inbound Agent is a specialized Docker image for Kubernetes and containerized environments. It automatically connects to a Jenkins controller using environment variables, making it ideal for dynamic agent provisioning in Kubernetes clusters and CI/CD pipelines.

Meilisearch

Docker Hardened Image

A lightning-fast search engine API bringing AI-powered hybrid search to your sites and applications.

Distribution Registry

Docker Hardened Image

The toolkit to pack, ship, store, and deliver container content

Piraeus HA Controller

Docker Hardened Image

High Availability Controller for stateful workloads using storage provisioned by Piraeus. Speeds up failover process and monitors DRBD resources.

Vertical Pod Autoscaler Admission Controller

Docker Hardened Image

Admission webhook controller for Kubernetes Vertical Pod Autoscaler that sets resource requests on new pods.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

OpenBao

Docker Hardened Image

OpenBao provides a solution to manage, store, and distribute sensitive data, including secrets, certificates, and keys

Socket CLI

Docker Hardened Image

Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

HTTP Echo

Docker Hardened Image

A lightweight Go web server that serves provided content as an HTML page, ideal for demos and testing.

NATS CLI

Docker Hardened Image

A command line utility to interact with and manage NATS.

Jsonnet

Docker Hardened Image

A configuration language for app and tool developers. A simple extension of JSON. Eliminate duplication with object-orientation.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.