Qdrant

Docker Hardened Image

A high-performance vector database and similarity search engine for building the next generation of AI applications.

KServe LocalModel Controller

Docker Hardened Image

Enables local model caching and management.

Yet Another CloudWatch Exporter (YACE)

Docker Hardened Image

YACE is a Prometheus exporter for AWS CloudWatch that auto-discovers resources through AWS tags and exposes their metrics with AWS tags as labels.

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

Forklift Validation

Docker Hardened Image

OPA REST server that enforces Rego migration policies for the Forklift VM migration operator.

Karma is an alert dashboard for Prometheus Alertmanager that aggregates alerts from multiple Alertmanager instances, deduplicates and groups them, and provides silence management.

Azure CLI

Docker Hardened Image

Azure CLI is Microsoft's cross-platform command-line tool for creating and managing Azure resources.

Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped

Datadog Cluster Agent

Docker Hardened Image

Datadog Cluster Agent runs centralized Kubernetes cluster-level checks, serves a custom-metrics provider for HPA, and acts as a proxy between node agents and the Kubernetes API.

S3Proxy

Docker Hardened Image

S3Proxy implements the S3 API and proxies requests to backends such as the local filesystem, Azure Blob Storage, Google Cloud Storage, and other providers via Apache jclouds.

Forklift Populator Controller

Docker Hardened Image

Kubernetes controller that populates persistent volumes during Forklift VM migrations. Part of the Forklift migration toolkit, the populator controller watches OvirtVolumePopulator, OpenstackVolumePopulator, and VSphereXcopyVolumePopulator custom resources and launches the matching populator pod to transfer VM disk data into the target PersistentVolumeClaim on KubeVirt.

MongoDB MCP Server

Docker Hardened Image

A Model Context Protocol server for MongoDB that enables querying and schema discovery via MCP.

Beat Exporter

Docker Hardened Image

Prometheus exporter for Elastic Beats stats endpoints.

AuthService

Docker Hardened Image

Envoy external authorization service that moves OIDC/OAuth2 token acquisition out of application code and into the Istio mesh

OpenTelemetry Operator Helm chart

Docker Hardened Image

Kubernetes operator for managing OpenTelemetry Collectors and auto-instrumentation

Grafana Mimir

Docker Hardened Image

Scalable, multi-tenant, long-term storage backend for Prometheus metrics.

Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

Kiali

Docker Hardened Image

Kiali is the Istio service mesh console: it visualizes traffic, health, and configuration for workloads on Kubernetes and OpenShift clusters.

Forklift Controller

Docker Hardened Image

Forklift Controller orchestrates migrations of virtual machines from VMware, oVirt, OpenStack, OVA, and Hyper-V to KubeVirt.

Forklift Operator

Docker Hardened Image

Forklift Operator deploys and manages the Forklift toolkit for migrating virtual machines from VMware, oVirt, OpenStack, Hyper-V, EC2, and OVA sources to KubeVirt.

Zot Helm chart

Docker Hardened Image

Zot is a production-ready, vendor-neutral OCI image registry with full OCI standards compliance and scalability.

Airflow PgBouncer Exporter exposes PgBouncer connection pool statistics as Prometheus metrics, covering client and server connections, pool health, and query statistics.

CSI-Addons Sidecar

Docker Hardened Image

csi-addons-k8s-sidecar is the Kubernetes CSI-Addons sidecar that runs alongside a CSI driver to expose advanced storage operations such as reclaim space, network fence, encryption key rotation and volume replication to the CSI-Addons controller.

Multus CNI

Docker Hardened Image

Multus CNI is a CNI meta-plugin that enables attaching multiple network interfaces to Kubernetes pods

Falco

Docker Hardened Image

Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.

Hyperledger Fabric Tools

Docker Hardened Image

CLI tools for managing Hyperledger Fabric networks

JupyterHub K8s Secret Sync

Docker Hardened Image

A minimal ACME certificate sync image for JupyterHub on Kubernetes.

NVFlare

Docker Hardened Image

NVIDIA Federated Learning Application Runtime Environment for privacy-preserving distributed AI.

Calico Pod2Daemon FlexVol

Docker Hardened Image

Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.

Tailscale Kubernetes Operator

Docker Hardened Image

Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.