amazon-k8s-cni-init

Docker Hardened Image

Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.

Couchbase MCP Server

Docker Hardened Image

The official Couchbase MCP server that connects AI tools and assistants to Couchbase clusters — running SQL++ queries, browsing buckets, scopes, and collections, performing key-value operations, and checking cluster health — over stdio transport, read-only by default.

Configurable HTTP Proxy

Docker Hardened Image

node-http-proxy plus a REST API for dynamic JupyterHub routing.

Placement

Docker Hardened Image

A Kubernetes controller that makes placement decisions for workloads across managed clusters based on Placement APIs.

Kyverno Reports Server

Docker Hardened Image

Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.

WireMock GUI

Docker Hardened Image

WireMock with an Angular admin webapp; a community fork by Christopher Holomek that adds an interactive browser UI for managing stubs, request logs, and recordings.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

WBITT Network Multitool

Docker Hardened Image

A multi-arch multitool for container and network testing and troubleshooting. Includes a comprehensive set of networking utilities and a minimal nginx web server for easy access and testing. The -extra flavor includes additional tools for advanced networking, database connectivity, and security testing.

VictoriaMetrics Alerts Helm chart

Docker Hardened Image

Executes a list of given MetricsQL expressions (rules) and sends alerts to Alert Manager

Multus Dynamic Networks Controller

Docker Hardened Image

A Kubernetes controller granting the ability to plug/unplug network interfaces to/from running pods.

Jaeger Query

Docker Hardened Image

Jaeger Query is the Jaeger v2 distributed-tracing query service: it serves the Jaeger UI and the HTTP/gRPC query API for retrieving traces from a storage backend.

Emissary-Ingress

Docker Hardened Image

Emissary-ingress is an open-source, developer-centric, Kubernetes-native API gateway built on Envoy Proxy.

Cass Config Builder

Docker Hardened Image

Configuration templating engine for Apache Cassandra, used by the DataStax Kubernetes Operator.

Datadog Operator

Docker Hardened Image

The Datadog Operator is a Kubernetes operator that manages Datadog Agent deployments and related Datadog resources through custom resources.

Apache Superset

Docker Hardened Image

Apache Superset is a modern data exploration and visualization platform.

Fetch MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to fetch and convert web content for usage by LLMs. This server enables LLMs to retrieve and process content from web pages, converting HTML to markdown for easier consumption.

Azure Service Operator

Docker Hardened Image

Azure Service Operator allows you to create Azure resources using kubectl.

Varnish Cache

Docker Hardened Image

Varnish Cache is a high-performance HTTP accelerator and caching reverse proxy designed to speed up web applications by caching content in memory and serving it at very high throughput.

Nginx Exporter

Docker Hardened Image

Nginx exporter makes it possible to monitor Nginx or Nginx Plus with Prometheus by exposing metrics in Prometheus format.

Google Cloud CLI

Docker Hardened Image

The Google Cloud CLI (gcloud, bq, gsutil) for managing Google Cloud Platform resources. The -emulators flavor additionally bundles Google's local service emulators for Cloud Datastore, Cloud Firestore, Pub/Sub, Cloud Bigtable, and Cloud Spanner (linux/amd64 only), for developing and testing against Google Cloud APIs entirely offline.

Source Watcher

Docker Hardened Image

Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.

Linstor Affinity Controller

Docker Hardened Image

Keeps Kubernetes PersistentVolume affinity in sync with LINSTOR volume placement for optimal workload scheduling.

drbd-utils

Docker Hardened Image

DRBD user-space utilities for managing DRBD resources

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Object Storage Sidecar

Docker Hardened Image

Object storage sidecar that manages bucket lifecycle by coordinating with COSI drivers.

Calico Typha

Docker Hardened Image

Calico fan-out proxy that scales access to the Calico datastore for large clusters.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

Istio Egress Helm chart

Docker Hardened Image

Helm chart for deploying Istio gateways.

Istio Ingress Helm chart

Docker Hardened Image

Helm chart for deploying Istio gateways.

Cilium Hubble Export to Stdout

Docker Hardened Image

Streams Hubble network flow export logs to stdout for log collection