Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Haskell

Docker Hardened Image

Haskell is a statically typed, purely functional programming language with the Glasgow Haskell Compiler (GHC).

SpiceDB

Docker Hardened Image

An open source, Google Zanzibar-inspired database for fine-grained authorization.

Kured

Docker Hardened Image

Kubernetes Reboot Daemon

Grafana Beyla

Docker Hardened Image

Grafana Beyla is an eBPF-based application auto-instrumentation tool that captures OpenTelemetry traces and metrics for web services and network flows without code changes.

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

KServe Controller

Docker Hardened Image

A Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks.

AWS Private CA Issuer

Docker Hardened Image

AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.

CDI Operator

Docker Hardened Image

CDI Operator deploys and manages the Containerized Data Importer infrastructure components in Kubernetes

API Declarative CLI (ADC)

Docker Hardened Image

ADC is a command line utility that interfaces with API7 Enterprise and Apache APISIX Admin APIs.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

drbd-reactor

Docker Hardened Image

A user-space daemon that monitors and manages DRBD resources

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

Calico CSI

Docker Hardened Image

Calico CSI driver for secure connections from Kubernetes pods to local daemons.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

VersityGW

Docker Hardened Image

VersityGW is a high-performance S3 translation service.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Distribution Registry

Docker Hardened Image

The toolkit to pack, ship, store, and deliver container content

CSI External Health Monitor Controller

Docker Hardened Image

csi-external-health-monitor-controller is a Kubernetes CSI sidecar component that monitors the health of CSI volumes and reports anomalies to the Kubernetes API.

Jaeger Query

Docker Hardened Image

Jaeger Query is the Jaeger v2 distributed-tracing query service: it serves the Jaeger UI and the HTTP/gRPC query API for retrieving traces from a storage backend.

Meilisearch

Docker Hardened Image

A lightning-fast search engine API bringing AI-powered hybrid search to your sites and applications.

CDI Controller

Docker Hardened Image

CDI Controller manages the lifecycle of import, upload, and clone operations for virtual machine disk images

vSphere CSI Driver

Docker Hardened Image

Container Storage Interface (CSI) driver for VMware vSphere. Provisions and attaches vSphere volumes for Kubernetes workloads, running as the CSI controller plugin and as the node plugin that formats and mounts volumes.

Datadog Operator

Docker Hardened Image

The Datadog Operator is a Kubernetes operator that manages Datadog Agent deployments and related Datadog resources through custom resources.

Jenkins Inbound Agent

Docker Hardened Image

Jenkins Inbound Agent is a specialized Docker image for Kubernetes and containerized environments. It automatically connects to a Jenkins controller using environment variables, making it ideal for dynamic agent provisioning in Kubernetes clusters and CI/CD pipelines.

Couchbase MCP Server

Docker Hardened Image

The official Couchbase MCP server that connects AI tools and assistants to Couchbase clusters — running SQL++ queries, browsing buckets, scopes, and collections, performing key-value operations, and checking cluster health — over stdio transport, read-only by default.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.