K8ssandra Medusa

Docker Hardened Image

Apache Cassandra backup and restore tool

nginx/nginx-ingress

NGINX Inc.

NGINX and NGINX Plus Ingress Controllers for Kubernetes

Gitleaks

Docker Hardened Image

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Written in Go.

APISIX

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

Terraform

Docker Hardened Image

Terraform enables you to safely and predictably create, change, and improve infrastructure. It codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

Cilium Hubble Proto

Docker Hardened Image

Protocol buffer definitions for Hubble, the networking and security observability platform for Cilium

orientdb

Docker Official Image

OrientDB a Multi-Model Open Source NoSQL DBMS that combines graphs and documents.

ClickHouse Keeper

Docker Hardened Image

ClickHouse Keeper is a ZooKeeper-compatible coordination service for ClickHouse cluster replication and distributed DDL.

Kustomize

Docker Hardened Image

Kustomize lets you customize raw, template-free YAML files for Kubernetes configurations.

A Prometheus exporter that receives access logs from nginx through the syslog protocol and converts them into metrics.

Polaris

Docker Hardened Image

Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.

Apache Solr

Docker Hardened Image

Apache Solr is the blazing-fast, open-source, multi-modal search platform built on Apache Lucene. It powers full-text search, faceted navigation, and analytics at scale across enterprise and cloud-native deployments.

grafana/synthetic-monitoring-agent

Grafana Labs

Blackbox Exporter agent which executes checks for the Grafana Cloud Synthetic Monitoring service.

Certbot

Docker Hardened Image

EFF's ACME client for obtaining and renewing TLS certificates from Let's Encrypt and any ACME-compatible CA.

ActiveMQ Artemis

Docker Hardened Image

Apache ActiveMQ Artemis is an open source project to build a multi-protocol, embeddable, very high performance, clustered, asynchronous messaging system.

MySQL Server Exporter

Docker Hardened Image

A Prometheus exporter for MySQL Server (mysqld_exporter) exposing server status and performance metrics.

Azure Metrics Exporter

Docker Hardened Image

Azure Monitor metrics exporter for Prometheus

NATS Server Config Reloader

Docker Hardened Image

A sidecar utility that watches for NATS configuration file changes and triggers server reloads.

OpenSearch Dashboards

Docker Hardened Image

OpenSearch Dashboards is a data visualization and user interface for OpenSearch

Prometheus Adapter

Docker Hardened Image

Prometheus Adapter implements the custom.metrics.k8s.io and external.metrics.k8s.io APIs for Kubernetes HPA and VPA, exposing metrics from Prometheus.

Telegraf

Docker Hardened Image

Telegraf is a plugin-driven server agent for collecting and reporting metrics.

JupyterHub K8s Hub

Docker Hardened Image

JupyterHub hub component for Zero to JupyterHub on Kubernetes, with Kubespawner and authenticators.

StatsD Exporter

Docker Hardened Image

A Prometheus exporter that receives StatsD-style metrics and exports them as Prometheus metrics via configurable mapping rules and tagging formats.

kong/kong-gateway

Kong Inc.

Kong Gateway Enterprise - The world’s most popular API gateway.

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

Goldilocks

Docker Hardened Image

A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.

MetalLB Controller

Docker Hardened Image

MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.

Docker Scout CLI

Docker Hardened Image

Command-line interface for Docker Scout providing container image analysis, vulnerability scanning, and policy evaluation capabilities for securing your software supply chain.

ORAS

Docker Hardened Image

ORAS (OCI Registry As Storage) is a command-line tool for managing OCI artifacts in registries. It enables developers to push, pull, copy, and discover various content types beyond container images.