Gatekeeper CRDs

Docker Hardened Image

Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.

Couchbase MCP Server

Docker Hardened Image

The official Couchbase MCP server that connects AI tools and assistants to Couchbase clusters — running SQL++ queries, browsing buckets, scopes, and collections, performing key-value operations, and checking cluster health — over stdio transport, read-only by default.

SeaweedFS COSI Driver

Docker Hardened Image

SeaweedFS COSI Driver is a Kubernetes Container Object Storage Interface implementation for dynamic object storage provisioning.

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Velero Plugin for Azure

Docker Hardened Image

Plugin to support running Velero on Azure.

Kubernetes Autoscaler Addon Resizer

Docker Hardened Image

A container that watches over another container in a deployment and vertically scales the dependent container up and down based on the number of nodes in the cluster.

Datadog Operator

Docker Hardened Image

The Datadog Operator is a Kubernetes operator that manages Datadog Agent deployments and related Datadog resources through custom resources.

socat

Docker Hardened Image

Multipurpose relay for binary protocols

Kubernetes Cloud Controller Manager (cloud-controller-manager)

Docker Hardened Image

Runs cloud-provider-specific control loops in the Kubernetes control plane. cloud-controller-manager embeds the cloud-specific control loops that integrate a Kubernetes cluster with the underlying cloud provider's APIs.

Zookeeper

Docker Hardened Image

Apache Zookeeper is a distributed coordination service for distributed applications

Dapr Injector

Docker Hardened Image

Kubernetes admission controller that automatically injects the Dapr sidecar container into pods, enabling Dapr capabilities for applications.

Dapr Placement Service

Docker Hardened Image

Kubernetes control plane service that manages actor placement using a consistent hash ring, enabling distributed actor instances across the cluster with automatic rebalancing.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

CDI API Server

Docker Hardened Image

CDI API Server provides a Kubernetes API extension for managing virtual machine disk image imports in KubeVirt

CSI Hostpath Plugin

Docker Hardened Image

csi-hostpath-plugin is a Kubernetes CSI driver that uses the host's filesystem as storage, commonly used for testing and development purposes.

drbd-shutdown-guard

Docker Hardened Image

An init-container utility that ensures DRBD resources are properly handled during system shutdown

Connaisseur

Docker Hardened Image

A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.

CDI Cloner

Docker Hardened Image

CDI Cloner clones persistent volume claims for virtual machine disk management in Kubernetes

K8ssandra Cass Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Apache Cassandra clusters. Handles provisioning, scaling, rolling restarts, upgrades, and failure remediation for production-grade Cassandra workloads in Kubernetes environments.

Socket CLI

Docker Hardened Image

Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

Open Cluster Management Work

Docker Hardened Image

Work agent for dispatching Kubernetes manifests to managed clusters via the ManifestWork API.

Velero Plugin for GCP

Docker Hardened Image

Plugin to support running Velero on GCP.

Configurable HTTP Proxy

Docker Hardened Image

node-http-proxy plus a REST API for dynamic JupyterHub routing.

Dapr Sentry

Docker Hardened Image

Dapr Sentry certificate authority that issues mTLS certificates for secure communication between Dapr sidecars and control plane components.

Dapr Operator

Docker Hardened Image

Kubernetes operator that manages Dapr component Custom Resources (state stores, pub/sub, bindings, etc.) and provides validation webhooks for component configurations.

Deno

Docker Hardened Image

Deno is a secure runtime for JavaScript and TypeScript with built-in tooling, modern standards support, and first-class TypeScript support.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.

Cilium Hubble Export to Stdout

Docker Hardened Image

Streams Hubble network flow export logs to stdout for log collection