Playwright

Docker Hardened Image

End-to-end browser automation and testing framework with bundled Chromium-compatible, Firefox, and WebKit browsers

Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.

Connaisseur

Docker Hardened Image

A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.

amazon-k8s-cni-init

Docker Hardened Image

Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.

K8ssandra Cass Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Apache Cassandra clusters. Handles provisioning, scaling, rolling restarts, upgrades, and failure remediation for production-grade Cassandra workloads in Kubernetes environments.

Zookeeper

Docker Hardened Image

Apache Zookeeper is a distributed coordination service for distributed applications

CDI Upload Proxy

Docker Hardened Image

CDI Upload Proxy forwards upload requests to the CDI upload server for virtual machine disk images

Source Watcher

Docker Hardened Image

Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.

Velero Plugin for GCP

Docker Hardened Image

Plugin to support running Velero on GCP.

Deno

Docker Hardened Image

Deno is a secure runtime for JavaScript and TypeScript with built-in tooling, modern standards support, and first-class TypeScript support.

Open Cluster Management Work

Docker Hardened Image

Work agent for dispatching Kubernetes manifests to managed clusters via the ManifestWork API.

Dapr Scheduler

Docker Hardened Image

A Dapr control-plane service that manages persistent job scheduling, reminders, and timers for distributed applications.

Prometheus Helm Chart

Docker Hardened Image

Prometheus is a systems and service monitoring system that records metrics in a time series database.

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network

Open Cluster Management Addon Manager

Docker Hardened Image

Runs on the hub cluster and configures the installation of addon agents for each managed cluster.

Cass Config Builder

Docker Hardened Image

Configuration templating engine for Apache Cassandra, used by the DataStax Kubernetes Operator.

Prometheus AlertManager Helm chart

Docker Hardened Image

Alertmanager deduplicates, groups, and routes alerts from Prometheus to notification receivers and supports silences, inhibition and HA clustering.

WBITT Network Multitool

Docker Hardened Image

A multi-arch multitool for container and network testing and troubleshooting. Includes a comprehensive set of networking utilities and a minimal nginx web server for easy access and testing. The -extra flavor includes additional tools for advanced networking, database connectivity, and security testing.

Varnish Cache

Docker Hardened Image

Varnish Cache is a high-performance HTTP accelerator and caching reverse proxy designed to speed up web applications by caching content in memory and serving it at very high throughput.

Kafka Exporter

Docker Hardened Image

A Prometheus exporter for Kafka metrics

Multus Dynamic Networks Controller

Docker Hardened Image

A Kubernetes controller granting the ability to plug/unplug network interfaces to/from running pods.

Kyverno Reports Server

Docker Hardened Image

Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.

HAProxy Helm chart

Docker Hardened Image

The Reliable, High Performance TCP/HTTP Load Balancer

Registration Operator

Docker Hardened Image

Kubernetes operator for managing Open Cluster Management hub and spoke components.

GitLab Shell

Docker Hardened Image

GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.

Ollama

Docker Hardened Image

Run and serve large language models locally over an HTTP API (CPU inference).

Placement

Docker Hardened Image

A Kubernetes controller that makes placement decisions for workloads across managed clusters based on Placement APIs.

Jaeger Ingester

Docker Hardened Image

Jaeger v2 unified binary preconfigured to ingest spans from Kafka into a storage backend.

WireMock GUI

Docker Hardened Image

WireMock with an Angular admin webapp; a community fork by Christopher Holomek that adds an interactive browser UI for managing stubs, request logs, and recordings.

Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.