Kubernetes Cloud Controller Manager (cloud-controller-manager)

Docker Hardened Image

Runs cloud-provider-specific control loops in the Kubernetes control plane. cloud-controller-manager embeds the cloud-specific control loops that integrate a Kubernetes cluster with the underlying cloud provider's APIs.

AWS Node Termination Handler

Docker Hardened Image

Gracefully handles EC2 instance termination events in Kubernetes by cordoning and draining nodes before shutdown, supporting spot interruptions, scheduled maintenance, and ASG scale-in events.

Kubeflow Pipelines - API Server

Docker Hardened Image

The Kubeflow Pipelines API Server coordinates k8s workflows in the Kubeflow Pipeline ecosystem.

HTTP Echo

Docker Hardened Image

A lightweight Go web server that serves provided content as an HTML page, ideal for demos and testing.

Datadog Operator

Docker Hardened Image

The Datadog Operator is a Kubernetes operator that manages Datadog Agent deployments and related Datadog resources through custom resources.

docker/ucp-auth

Docker, Inc.

Please refer to the docker/ucp image for more information

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

Gatekeeper CRDs

Docker Hardened Image

Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.

SpiceDB

Docker Hardened Image

An open source, Google Zanzibar-inspired database for fine-grained authorization.

Jaeger Query

Docker Hardened Image

Jaeger Query is the Jaeger v2 distributed-tracing query service: it serves the Jaeger UI and the HTTP/gRPC query API for retrieving traces from a storage backend.

FleetConfig Controller

Docker Hardened Image

Kubernetes controller for managing Open Cluster Management FleetConfig hub and spoke resources.

Open source framework for processing, monitoring, and alerting on time series data

Vertical Pod Autoscaler Updater

Docker Hardened Image

Monitors the VPA resources and compares current Pod resource requests with the recommendations, evicting and updating pod resources accordingly.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Hatchet Lite

Docker Hardened Image

An orchestration engine for background tasks, AI agents, and durable workflows

r-base

Docker Official Image

R is a system for statistical computation and graphics.

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

APISIX Ingress Controller

Docker Hardened Image

Controller to run the APISIX Gateway as a Kubernetes Ingress.

VictoriaMetrics VMAuth

Docker Hardened Image

VictoriaMetrics VMAuth is an HTTP proxy for authorizing, routing, and load balancing requests to VictoriaMetrics components.

Piraeus Operator

Docker Hardened Image

Kubernetes operator that manages LINSTOR clusters and automates deployment, scaling, and management of LINSTOR storage clusters in Kubernetes.

Data Prepper

Docker Hardened Image

Server-side data collector for trace, log, and metric pipelines that filter, enrich, transform, and aggregate observability data for OpenSearch.

amazon-k8s-cni

Docker Hardened Image

Networking plugin for pod networking in Kubernetes using Elastic Network Interfaces on AWS.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Couchbase MCP Server

Docker Hardened Image

The official Couchbase MCP server that connects AI tools and assistants to Couchbase clusters — running SQL++ queries, browsing buckets, scopes, and collections, performing key-value operations, and checking cluster health — over stdio transport, read-only by default.

Velero Plugin for Azure

Docker Hardened Image

Plugin to support running Velero on Azure.

OpenTelemetry Go Autoinstrumentation

Docker Hardened Image

This is a Golang autoinstrumentation agent used by the OpenTelemetry Operator

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

Azure Functions (Python)

Docker Hardened Image

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

SeaweedFS COSI Driver

Docker Hardened Image

SeaweedFS COSI Driver is a Kubernetes Container Object Storage Interface implementation for dynamic object storage provisioning.