Grist

Docker Hardened Image

Grist relational spreadsheet

OpenCost

Docker Hardened Image

OpenCost is an open source cost monitoring tool for Kubernetes and cloud spend

Karpenter

Docker Hardened Image

karpenter is an efficient node manager for kubernetes clusters

LiteLLM Database

Docker Hardened Image

LiteLLM Database is the database-enabled LiteLLM proxy image with Prisma support for persistent PostgreSQL-backed keys, budgets, spend tracking, and gateway configuration.

Azure Functions (Node.js)

Docker Hardened Image

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

Kubernetes API Server (kube-apiserver)

Docker Hardened Image

Front end for the Kubernetes control plane. kube-apiserver exposes the Kubernetes API over HTTP(S), performs request validation, authentication and authorization, runs admission control, and persists cluster state to an etcd backend.

Harbor Core

Docker Hardened Image

Harbor Core is the main API server component of Harbor, an open source trusted cloud native registry project that stores, signs, and scans content.

Docker

Docker Hardened Image

The Docker CLI is the official command-line interface for Docker. It provides commands to build, run, and manage Docker containers and images.

Dex

Docker Hardened Image

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

KEDA Helm chart

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

Grype

Docker Hardened Image

Grype is a vulnerability scanner for container images and filesystems. It provides fast and accurate vulnerability detection with support for multiple package ecosystems and output formats.

Syft

Docker Hardened Image

Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.

Flyway

Docker Hardened Image

Flyway is an open-source database migration tool that simplifies the evolution of your database schema.

Git

Docker Hardened Image

Distributed version control system for tracking changes in source code

Istio Discovery (istiod) Helm chart

Docker Hardened Image

Helm chart for the Istio control plane (istiod) from the Istio project.

Temporal UI

Docker Hardened Image

Temporal UI is a web-based interface for managing and monitoring Temporal workflows, providing visibility into workflow execution and system health.

Istio Base Helm chart

Docker Hardened Image

This chart installs resources shared by all Istio revisions. This includes Istio CRDs.

TruffleHog

Docker Hardened Image

TruffleHog is a secrets scanning tool that finds credentials, API keys, and sensitive data in git repositories, filesystems, S3 buckets, and more. Written in Go.

Harbor Exporter

Docker Hardened Image

Harbor Exporter exposes Harbor registry metrics for scraping by Prometheus.

Vault Helm chart

Docker Hardened Image

Vault is a tool for securely accessing secrets.

Velero Plugin for AWS

Docker Hardened Image

Plugin to support running Velero on AWS.

Istioctl

Docker Hardened Image

Istioctl image for managing Istio deployments

Moby Buildkit

Docker Hardened Image

concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

Grafana Alloy Helm Chart

Docker Hardened Image

Vendor-agnostic OpenTelemetry Collector distribution with programmable pipelines

Thanos

Docker Hardened Image

Thanos is a highly available metrics system that offers long term storage capabilities.

CSI Provisioner

Docker Hardened Image

csi-provisioner is a Kubernetes CSI sidecar component that manages dynamic volume provisioning by watching PersistentVolumeClaim objects and coordinating with CSI drivers.

Cilium Hubble UI

Docker Hardened Image

Web-based graphical interface for Cilium Hubble

Calico CNI

Docker Hardened Image

Calico CNI plugin provides networking and network policy for Kubernetes clusters

Promtail Helm chart

Docker Hardened Image

Agent which ships the contents of local logs to a private Grafana Loki instance or Grafana Cloud.

Open Policy Agent

Docker Hardened Image

OPA is a policy engine that streamlines policy management across your stack for improved development, security and audit capability.