Uptime Kuma

Docker Hardened Image

Uptime Kuma is a open-source, self-hosted monitoring tool.

Istio Pilot

Docker Hardened Image

Istio control plane component that configures proxies and handles service discovery

ClickHouse

Docker Hardened Image

ClickHouse is the fastest and most resource efficient OSS database for real-time apps and analytics.

OAuth2 Proxy

Docker Hardened Image

A reverse proxy that provides authentication using OAuth2 and OIDC providers.

GitLab Webservice

Docker Hardened Image

GitLab Webservice runs the Puma application server for the GitLab Rails application, providing web UI and API access.

Argo Events

Docker Hardened Image

Argo Events is an event-driven Workflow Automation Framework

kube-state-metrics

Docker Hardened Image

an add-on agent to generate and expose cluster-level metrics

Virt Operator

Docker Hardened Image

Virt Operator deploys and manages the KubeVirt virtualization infrastructure in Kubernetes

MediaWiki

Docker Hardened Image

Free and open-source wiki software (the software behind Wikipedia).

Strimzi Kafka Bridge

Docker Hardened Image

Strimzi Kafka Bridge provides a lightweight HTTP REST interface to an Apache Kafka cluster, enabling HTTP clients to produce and consume messages without Kafka client libraries.

Scalable datastore for metrics, events, and real-time analytics

K8ssandra Operator

Docker Hardened Image

Kubernetes operator for managing multi-cluster Apache Cassandra deployments with K8ssandra. Provides automated lifecycle management, backup/restore, and monitoring capabilities.

clamav

Docker Hardened Image

ClamAV is an open source (GPLv2) anti-virus toolkit, designed especially for e-mail scanning on mail gateways.

JRuby

Docker Hardened Image

JRuby is an implementation of the Ruby programming language that runs on the Java Virtual Machine (JVM).

Contour

Docker Hardened Image

Contour is a Kubernetes ingress controller using Envoy proxy to provide dynamic configuration updates and high performance load balancing. It supports Ingress, HTTPProxy, and Gateway API.

Virt Export Proxy

Docker Hardened Image

Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt

Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

Kubernetes Controller Manager (kube-controller-manager)

Docker Hardened Image

Runs core control loops in the Kubernetes control plane. kube-controller-manager runs controller processes that regulate the state of the cluster and perform routine tasks.

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

Etcd

Docker Hardened Image

Etcd is a strongly consistent, distributed key-value store that provides reliable data storage

Grist

Docker Hardened Image

Grist relational spreadsheet

Reloader

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

Prometheus Pushgateway

Docker Hardened Image

A push gateway for Prometheus that accepts metrics from ephemeral or batch jobs and exposes them for scraping by Prometheus.

AWS EFS CSI Driver

Docker Hardened Image

The AWS EFS CSI driver provides Container Storage Interface (CSI) support for Amazon EFS file systems in Kubernetes clusters. It enables dynamic and static provisioning of EFS volumes.

Grafana Image Renderer

Docker Hardened Image

Headless browser service for rendering Grafana panels and dashboards as PNG images and PDF documents using Chromium.

Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

Cassandra Reaper

Docker Hardened Image

Cassandra Reaper is a centralized, stateful, highly available tool for running Apache Cassandra repairs against single or multi-site clusters.

Ceph CSI

Docker Hardened Image

Container Storage Interface driver for Ceph-backed RBD, CephFS, NFS, and NVMe-oF workloads on Kubernetes.

k6

Docker Hardened Image

Grafana k6 is a modern load testing tool using Go and JavaScript for performance testing

Elixir

Docker Hardened Image

Elixir is a dynamic, functional language built on the Erlang VM (BEAM) for building scalable, fault-tolerant applications.