notary

Docker Official Image

DEPRECATED; Notary server and signer cooperatively handle signing and distribution

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Calico Typha

Docker Hardened Image

Calico fan-out proxy that scales access to the Calico datastore for large clusters.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

A container management platform built for organizations that deploy containers in production.

Trust Manager Package

Docker Hardened Image

A trust manager package image that provides Debian CA certificates for use as an init container with cert-manager trust-manager.

Calico CTL

Docker Hardened Image

Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

hashicorp/vault

HashiCorp, an IBM Company

Official vault docker images

Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.

Kyverno Reports Server Helm chart

Docker Hardened Image

Kyverno reports server provides a scalable solution for storing policy reports and cluster policy reports.

Rancher Fleet Agent

SPIFFE Helper

Docker Hardened Image

Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.

ChartMuseum

Docker Hardened Image

An open-source Helm Chart Repository server with support for cloud and local storage backends.

Calico Whisker Backend

Docker Hardened Image

Backend API service for the Calico Whisker network flow visualization UI.

Cert Exporter

Docker Hardened Image

A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets

Tailscale Operator Helm chart

Docker Hardened Image

Helm chart for the Tailscale Kubernetes Operator, which manages Tailscale resources including ingress, egress, subnet routers, and proxies within a cluster.

SPIFFE CSI Driver

Docker Hardened Image

Kubernetes CSI driver that injects the SPIFFE Workload API socket into workload pods as an ephemeral inline volume.

Handshake service for kernel TLS consumers

hashicorp/tfc-agent

HashiCorp, an IBM Company

Terraform Cloud Agent

Calico Node Driver Registrar

Docker Hardened Image

CSI node driver registrar repackaged by Calico to register the Calico CSI driver with the kubelet.

APISIX Helm chart

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

amazon/aws-alb-ingress-controller

Amazon Web Services

AWS ALB Ingress Controller

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

hashicorp/consul-template

HashiCorp, an IBM Company

Consul Template is a template renderer, notifier, and supervisor for HashiCorp Consul and Vault.

Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped

spiped

Docker Official Image

Spiped is a utility for creating symmetrically encrypted and authenticated pipes between sockets.

Snyk CLI

Docker Hardened Image

Find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code

Socket CLI

Docker Hardened Image

Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.