CSI Provisioner

Docker Hardened Image

csi-provisioner is a Kubernetes CSI sidecar component that manages dynamic volume provisioning by watching PersistentVolumeClaim objects and coordinating with CSI drivers.

Istio Discovery (istiod) Helm chart

Docker Hardened Image

Helm chart for the Istio control plane (istiod) from the Istio project.

Prometheus Operator

Docker Hardened Image

Kubernetes operator for managing Prometheus.

KEDA Helm chart

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

Argo Rollouts

Docker Hardened Image

Argo Rollouts is a Kubernetes controller and set of CRDs which provide advanced deployment capabilities

CSI Livenessprobe

Docker Hardened Image

livenessprobe is a Kubernetes CSI sidecar component that provides health checking capabilities for CSI drivers by monitoring driver endpoints and reporting liveness/readiness status to Kubernetes.

NATS

Docker Hardened Image

A high performance server for the NATS Messaging System.

CSI Resizer

Docker Hardened Image

csi-resizer is a Kubernetes CSI sidecar component that handles online volume expansion by watching PersistentVolumeClaim objects and coordinating with CSI drivers.

Istio Base Helm chart

Docker Hardened Image

This chart installs resources shared by all Istio revisions. This includes Istio CRDs.

Hyperledger Fabric Peer

Docker Hardened Image

Peer node service for Hyperledger Fabric blockchain networks

Trivy Operator

Docker Hardened Image

Kubernetes-native security toolkit that leverages Trivy to continuously scan your Kubernetes cluster for security issues.

Git

Docker Hardened Image

Distributed version control system for tracking changes in source code

gcc

Docker Official Image

The GNU Compiler Collection is a compiling system that supports several languages.

Trino

Docker Hardened Image

Distributed SQL query engine for big data

Trigger.dev

Docker Hardened Image

Self-hosted Trigger.dev webapp: an open-source background jobs and AI workflow platform for TypeScript, running on Postgres with optional Redis and ClickHouse.

kube-mgmt

Docker Hardened Image

Sidecar for managing OPA instances in Kubernetes.

Kubernetes API Server (kube-apiserver)

Docker Hardened Image

Front end for the Kubernetes control plane. kube-apiserver exposes the Kubernetes API over HTTP(S), performs request validation, authentication and authorization, runs admission control, and persists cluster state to an etcd backend.

google/cadvisor

Google

DEPRECATED: New images will NOT be pushed. Please use gcr.io/cadvisor/cadvisor instead.

MySQL Operator

Docker Hardened Image

The MYSQL Operator for Kubernetes is an Operator for Kubernetes managing MySQL InnoDB Cluster setups inside a Kubernetes Cluster.

Grafana Loki Helm chart

Docker Hardened Image

Loki - Cloud Native Log Aggregation by Grafana

Crane

Docker Hardened Image

Crane is a tool for interacting with remote images and registries. It allows to efficiently inspect, verify and manipulate containers, manifests and image layers as well as checking cryptographic signatures.

amazon/cloudwatch-agent

Amazon Web Services

Amazon CloudWatch Agent

notation

Docker Hardened Image

Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.

znc

Docker Official Image

ZNC - An advanced IRC bouncer

Homepage

Docker Hardened Image

Homepage is a highly customizable application dashboard with integrations for over 100 services and translations into multiple languages.

Descheduler

Docker Hardened Image

Kubernetes descheduler that evicts pods to improve workload placement.

hylang

Docker Official Image

Hy is a Lisp dialect that translates expressions into Python's abstract syntax tree.

AWS EBS CSI Driver

Docker Hardened Image

The AWS EBS CSI driver provides Container Storage Interface (CSI) support for Amazon EBS volumes in Kubernetes clusters. It enables dynamic and static provisioning, volume snapshots, and volume resizing.

BATS

Docker Hardened Image

Bash Automated Testing System - TAP-compliant testing framework for Bash

KServe Storage Initializer

Docker Hardened Image

Downloads model artifacts from various storage backends (S3, GCS, Azure, etc.) before KServe model serving containers start.