Source Watcher

Docker Hardened Image

Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.

Emissary-Ingress

Docker Hardened Image

Emissary-ingress is an open-source, developer-centric, Kubernetes-native API gateway built on Envoy Proxy.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

grafana/mimir

Grafana Labs

Horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

Cilium startup script

Docker Hardened Image

Cilium startup script

Nginx Exporter

Docker Hardened Image

Nginx exporter makes it possible to monitor Nginx or Nginx Plus with Prometheus by exposing metrics in Prometheus format.

Fetch MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to fetch and convert web content for usage by LLMs. This server enables LLMs to retrieve and process content from web pages, converting HTML to markdown for easier consumption.

circleci/ruby

CircleCI

Ruby is a dynamic, reflective, object-oriented, general-purpose, open-source programming language.

lightstreamer

Docker Official Image

Lightstreamer is a real-time messaging server optimized for the Internet.

Linstor Affinity Controller

Docker Hardened Image

Keeps Kubernetes PersistentVolume affinity in sync with LINSTOR volume placement for optimal workload scheduling.

Object Storage Sidecar

Docker Hardened Image

Object storage sidecar that manages bucket lifecycle by coordinating with COSI drivers.

clearlinux

Docker Official Image

DEPRECATED; Official docker build of Clear Linux OS for Intel Architecture

cirros

Docker Official Image

CirrOS is a Tiny OS that specializes in running on a cloud.

Kubernetes Ingress Default Backend

Docker Hardened Image

A minimal Kubernetes default backend server for unmatched ingress requests.

geonetwork

Docker Official Image

GeoNetwork is a FOSS catalog for spatially referenced resources.

GitLab Shell

Docker Hardened Image

GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.

notary

Docker Official Image

DEPRECATED; Notary server and signer cooperatively handle signing and distribution

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

Trust Manager Package

Docker Hardened Image

A trust manager package image that provides Debian CA certificates for use as an init container with cert-manager trust-manager.

Local Path Provisioner

Docker Hardened Image

Kubernetes controller that dynamically provisions local persistent volumes backed by node-local storage using hostPath or local volume types.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

clickhouse

Docker Official Image

ClickHouse is the fastest and most resource efficient OSS database for real-time apps and analytics.

Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

SpiceDB Operator

Docker Hardened Image

SpiceDB Operator manages SpiceDB authorization database instances in Kubernetes via SpiceDBCluster custom resources, handling provisioning, configuration, and version upgrades.

A container management platform built for organizations that deploy containers in production.

Node Problem Detector

Docker Hardened Image

A Kubernetes daemon that detects node-level problems — kernel issues, hardware faults, and runtime failures — and reports them to the API server as Events and NodeConditions.