Ory Oathkeeper Maester

Docker Hardened Image

Kubernetes controller that watches Ory Oathkeeper Rule custom resources and renders them into the access rules ConfigMap or file that Ory Oathkeeper consumes.

Zot Helm chart

Docker Hardened Image

Zot is a production-ready, vendor-neutral OCI image registry with full OCI standards compliance and scalability.

Harbor Helm chart

Docker Hardened Image

Harbor - An open source trusted cloud native registry that stores, signs, and scans content

Tailscale Kubernetes Operator

Docker Hardened Image

Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.

Spilo

Docker Hardened Image

HA PostgreSQL appliance with Patroni, a multi-major PostgreSQL bundle, and WAL-G backups.

R

Docker Hardened Image

R is a free software environment for statistical computing and graphics.

Drupal Nginx

Docker Hardened Image

Nginx web server preconfigured with the wodby virtual host presets for Drupal, plus WordPress, Laravel, Django, Matomo, and plain PHP.

Forklift Console Plugin

Docker Hardened Image

OpenShift console dynamic plugin for Forklift, the Migration Toolkit for Virtualization. Adds the migration UI (providers, plans, network and storage mappings) for moving virtual machines from VMware vSphere, oVirt, OpenStack, and OVA to KubeVirt.

Milvus etcd

Docker Hardened Image

Bitnami-compatible etcd distribution maintained by the Milvus project as the metadata store for Milvus deployments

Selenium Node Chromium

Docker Hardened Image

Selenium Grid worker node running Chromium with chromedriver, the arm64-capable browser node for Selenium Grid 4.x. Registers with a Selenium Hub and serves WebDriver sessions backed by the open-source Chromium browser.

GitHub MCP Server

Docker Hardened Image

GitHub's official MCP Server connects AI tools directly to GitHub's platform. This gives AI agents, assistants, and chatbots the ability to read repositories and code files, manage issues and PRs, analyze code, and automate workflows.

Forklift vSphere Copy Offload Populator

Docker Hardened Image

Forklift vSphere Copy Offload Populator clones VMware source disks directly on storage arrays through vSphere XCOPY, populating Kubernetes PersistentVolumeClaims without host data paths.

Azure ResourceManager Exporter

Docker Hardened Image

Prometheus exporter for Azure Resource Manager quotas, costs, resource health, IAM, and Defender security metrics.

Directus

Docker Hardened Image

Directus wraps any SQL database with instant REST and GraphQL APIs and a visual admin app.

Jaeger ES Index Cleaner

Docker Hardened Image

Jaeger es-index-cleaner deletes Jaeger indices older than a given number of days from Elasticsearch.

JupyterHub K8s Image Awaiter

Docker Hardened Image

A minimal init container image for JupyterHub that waits for images to be pre-pulled on Kubernetes nodes.

NVIDIA GPU Operator

Docker Hardened Image

The NVIDIA GPU Operator automates the management of the NVIDIA software components needed to provision GPUs in Kubernetes clusters. This image ships the operator controller, the nvidia-validator, the vectorAdd CUDA validation sample, and kubectl, together with the operand manifests the controller renders at runtime and the operator CRDs.

OpenTelemetry Java Autoinstrumentation

Docker Hardened Image

This is a Java autoinstrumentation agent used by the OpenTelemetry Operator

Percona Server

Docker Hardened Image

Percona Server is a drop-in replacement for MySQL with enhanced performance, scalability, and observability.

Cilium Helm chart

Docker Hardened Image

eBPF-based Networking, Security, and Observability for Kubernetes

AWS Provider for Secrets Store CSI Driver

Docker Hardened Image

The AWS provider for the Secrets Store CSI Driver fetches secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store and mounts them into Kubernetes pods as files, supporting both IRSA and EKS Pod Identity authentication.

Trust-Manager Helm chart

Docker Hardened Image

trust-manager manages TLS trust bundles in Kubernetes and OpenShift clusters.

Envoy Contrib

Docker Hardened Image

Envoy built with the contrib extensions, adding protocol filters such as Postgres, MySQL, Kafka, SIP, and RocketMQ on top of the core high-performance L7 proxy.

Codecov Frontend

Docker Hardened Image

Codecov Frontend is the single-page web application of a self-hosted Codecov deployment, served by nginx in front of the Codecov API.

wait-for-it

Docker Hardened Image

A pure bash script to test and wait on the availability of a TCP host and port. Useful for synchronizing the spin-up of interdependent services in Docker Compose.

Tensorflow Serving

Docker Hardened Image

A flexible, high-performance serving system for machine learning models designed for production environments

Jaeger ES Rollover

Docker Hardened Image

Jaeger es-rollover initializes, rolls over and trims the aliased Jaeger indices in an Elasticsearch cluster.

Azure ResourceGraph Exporter

Docker Hardened Image

Prometheus exporter for Azure ResourceGraph queries

Grafana MCP Server

Docker Hardened Image

A Model Context Protocol server for Grafana that provides AI agents with access to Grafana dashboards, datasources, alerting, incidents, and observability features. Enables LLMs to query metrics, logs, traces, and manage Grafana resources.

Matomo

Docker Hardened Image

Open-source web analytics platform and Google Analytics alternative.