Bun

Docker Hardened Image

Bun is a fast, modern JavaScript runtime.

Kyverno Background Controller

Docker Hardened Image

Kyverno is a component that continuously monitors and enforces policies on existing resources in the cluster, ensuring ongoing compliance.

External Secrets Operator Helm chart

Docker Hardened Image

External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Secrets Manager, Pulumi ESC and many more

Kyverno Reports Controller

Docker Hardened Image

Kyverno Reports Controller is a component that continuously monitors and enforces policies on existing resources in a Kubernetes

Kyverno Cleanup Controller

Docker Hardened Image

Kyverno is a component that continuously monitors and enforces policies on existing resources in the cluster, ensuring ongoing compliance.

KEDA Metrics API Server

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

Langfuse

Docker Hardened Image

Langfuse is an open-source LLM engineering platform for observability, prompt management, evaluations, and datasets.

Kyverno Init

Docker Hardened Image

Kyverno is a component that continuously monitors and enforces policies on existing resources in a kubernetes cluster, ensuring ongoing compliance.

Envoy Gateway

Docker Hardened Image

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.

Prometheus Alertmanager

Docker Hardened Image

Alertmanager deduplicates, groups, and routes alerts from Prometheus to notification receivers and supports silences, inhibition and HA clustering.

Cilium Operator

Docker Hardened Image

Operator managing Cilium networking and security policies

Virt API

Docker Hardened Image

Virt API provides the Kubernetes API extension for managing virtual machines in KubeVirt

Cilium Envoy

Docker Hardened Image

Envoy proxy for Cilium with minimal Envoy extensions and Cilium policy enforcement filters.

Cilium

Docker Hardened Image

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

Docker Sandboxes Agent Templates

Docker Hardened Image

Docker Sandboxes Agent Templates (SBX) images for AI coding agents

pgvector

Docker Hardened Image

PostgreSQL with the pgvector extension for open-source vector similarity search.

Istio Ztunnel

Docker Hardened Image

The ztunnel component of Istio's ambient mesh

AWS Load Balancer Controller

Docker Hardened Image

The AWS Load Balancer Controller manages AWS Elastic Load Balancers for Kubernetes clusters, provisioning ALBs for Ingress resources and NLBs for Service resources.

Istio Proxy v2

Docker Hardened Image

Istio proxy (Envoy with Istio extensions) - high-performance service mesh sidecar proxy

Argo Workflow Controller

Docker Hardened Image

Argo Workflow Controller is a Kubernetes-native workflow engine supporting DAG and step-based workflows.

MongoDB

Docker Hardened Image

MongoDB is a source-available, cross-platform, document-oriented database program.

Istio Install CNI

Docker Hardened Image

Istio CNI installer image and daemonset for Kubernetes environments

Calico Node

Docker Hardened Image

Calico's per-host DaemonSet container image. Provides CNI networking and policy for Kubernetes.

Cilium Operator AWS

Docker Hardened Image

cilium-operator-aws leverages AWS-native networking capabilities while providing advanced network security and observability features

Static

Docker Hardened Image

A very minimal image that is most useful in the context of running binary executables, such as those built from Rust and Golang.

KEDA Admission Webhooks

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

Grafana Loki Canary

Docker Hardened Image

Loki Canary - Test tool for Grafana Loki installations

Logstash

Docker Hardened Image

Logstash is a tool for managing events and logs.

Traefik Helm chart

Docker Hardened Image

Traefik, The Cloud Native Edge Router

CouchDB

Docker Hardened Image

CouchDB is a database that uses JSON for documents, an HTTP API, & JavaScript declarative indexing.