Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

kube-vip

Docker Hardened Image

Virtual IP and load balancer for Kubernetes

Grist

Docker Hardened Image

Grist relational spreadsheet

OpenCost

Docker Hardened Image

OpenCost is an open source cost monitoring tool for Kubernetes and cloud spend

Karpenter

Docker Hardened Image

karpenter is an efficient node manager for kubernetes clusters

Kubernetes API Server (kube-apiserver)

Docker Hardened Image

Front end for the Kubernetes control plane. kube-apiserver exposes the Kubernetes API over HTTP(S), performs request validation, authentication and authorization, runs admission control, and persists cluster state to an etcd backend.

KEDA Helm chart

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

Harbor Core

Docker Hardened Image

Harbor Core is the main API server component of Harbor, an open source trusted cloud native registry project that stores, signs, and scans content.

Azure Functions (Node.js)

Docker Hardened Image

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

Dex

Docker Hardened Image

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

Docker

Docker Hardened Image

The Docker CLI is the official command-line interface for Docker. It provides commands to build, run, and manage Docker containers and images.

Grype

Docker Hardened Image

Grype is a vulnerability scanner for container images and filesystems. It provides fast and accurate vulnerability detection with support for multiple package ecosystems and output formats.

Syft

Docker Hardened Image

Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.

Git

Docker Hardened Image

Distributed version control system for tracking changes in source code

Flyway

Docker Hardened Image

Flyway is an open-source database migration tool that simplifies the evolution of your database schema.

Istio Discovery (istiod) Helm chart

Docker Hardened Image

Helm chart for the Istio control plane (istiod) from the Istio project.

Temporal UI

Docker Hardened Image

Temporal UI is a web-based interface for managing and monitoring Temporal workflows, providing visibility into workflow execution and system health.

Istio Base Helm chart

Docker Hardened Image

This chart installs resources shared by all Istio revisions. This includes Istio CRDs.

Harbor Exporter

Docker Hardened Image

Harbor Exporter exposes Harbor registry metrics for scraping by Prometheus.

TruffleHog

Docker Hardened Image

TruffleHog is a secrets scanning tool that finds credentials, API keys, and sensitive data in git repositories, filesystems, S3 buckets, and more. Written in Go.

Vault Helm chart

Docker Hardened Image

Vault is a tool for securely accessing secrets.

Velero Plugin for AWS

Docker Hardened Image

Plugin to support running Velero on AWS.

Moby Buildkit

Docker Hardened Image

concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

CSI Provisioner

Docker Hardened Image

csi-provisioner is a Kubernetes CSI sidecar component that manages dynamic volume provisioning by watching PersistentVolumeClaim objects and coordinating with CSI drivers.

Istioctl

Docker Hardened Image

Istioctl image for managing Istio deployments

Grafana Alloy Helm Chart

Docker Hardened Image

Vendor-agnostic OpenTelemetry Collector distribution with programmable pipelines

Thanos

Docker Hardened Image

Thanos is a highly available metrics system that offers long term storage capabilities.

Cilium Hubble UI

Docker Hardened Image

Web-based graphical interface for Cilium Hubble

Calico CNI

Docker Hardened Image

Calico CNI plugin provides networking and network policy for Kubernetes clusters

MySQL Operator

Docker Hardened Image

The MYSQL Operator for Kubernetes is an Operator for Kubernetes managing MySQL InnoDB Cluster setups inside a Kubernetes Cluster.