Airflow PgBouncer Exporter exposes PgBouncer connection pool statistics as Prometheus metrics, covering client and server connections, pool health, and query statistics.

Forklift Populator Controller

Docker Hardened Image

Kubernetes controller that populates persistent volumes during Forklift VM migrations. Part of the Forklift migration toolkit, the populator controller watches OvirtVolumePopulator, OpenstackVolumePopulator, and VSphereXcopyVolumePopulator custom resources and launches the matching populator pod to transfer VM disk data into the target PersistentVolumeClaim on KubeVirt.

Elastic Cloud on Kubernetes (ECK) Operator

Docker Hardened Image

Kubernetes operator for managing Elasticsearch, Kibana, APM Server, and other Elastic Stack applications

Forklift Controller

Docker Hardened Image

Forklift Controller orchestrates migrations of virtual machines from VMware, oVirt, OpenStack, OVA, and Hyper-V to KubeVirt.

APISIX Ingress Controller Helm chart

Docker Hardened Image

The APISIX Ingress Controller Helm chart is an open source project for running the APISIX Gateway as a Kubernetes Ingress.

JupyterHub K8s Secret Sync

Docker Hardened Image

A minimal ACME certificate sync image for JupyterHub on Kubernetes.

KServe LocalModelNode Agent

Docker Hardened Image

Enables local model node management and caching.

httpbin

Docker Hardened Image

A simple HTTP request and response service for testing HTTP clients, libraries, and proxies.

Karma is an alert dashboard for Prometheus Alertmanager that aggregates alerts from multiple Alertmanager instances, deduplicates and groups them, and provides silence management.

k6-operator

Docker Hardened Image

An operator for running distributed k6 tests.

APISIX Helm chart

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

Milvus

Docker Hardened Image

Milvus is a high-performance, cloud-native vector database built for scalable vector similarity search, powering RAG, semantic search and recommendation systems.

GitLab Sidekiq

Docker Hardened Image

GitLab Sidekiq runs the background job processor for the GitLab Rails application, handling asynchronous work such as email delivery, repository operations, and CI/CD tasks.

Multus CNI

Docker Hardened Image

Multus CNI is a CNI meta-plugin that enables attaching multiple network interfaces to Kubernetes pods

Falco

Docker Hardened Image

Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.

NGINX Ingress Controller Helm chart

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

Forklift Operator

Docker Hardened Image

Forklift Operator deploys and manages the Forklift toolkit for migrating virtual machines from VMware, oVirt, OpenStack, Hyper-V, EC2, and OVA sources to KubeVirt.

KServe LocalModel Controller

Docker Hardened Image

Enables local model caching and management.

Upstash Context7 MCP Server

Docker Hardened Image

A Model Context Protocol server from Upstash that exposes Context7 tools over MCP.

Datadog Cluster Agent

Docker Hardened Image

Datadog Cluster Agent runs centralized Kubernetes cluster-level checks, serves a custom-metrics provider for HPA, and acts as a proxy between node agents and the Kubernetes API.

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

Authelia

Docker Hardened Image

Open-source authentication and authorization server with a login portal, single sign-on, and multi-factor authentication.

vSphere CSI Syncer

Docker Hardened Image

Metadata syncer for the VMware vSphere CSI driver. Runs alongside the CSI controller and synchronizes volume metadata between Kubernetes and the vSphere Cloud Native Storage (CNS) inventory.

Beat Exporter

Docker Hardened Image

Prometheus exporter for Elastic Beats stats endpoints.

Forklift API

Docker Hardened Image

Forklift API is the API server component of the Forklift VM migration toolkit. It serves the mutating and validating admission webhooks for Forklift custom resources and the auxiliary HTTP services the Forklift controller calls during migrations to KubeVirt.

CSI-Addons Sidecar

Docker Hardened Image

csi-addons-k8s-sidecar is the Kubernetes CSI-Addons sidecar that runs alongside a CSI driver to expose advanced storage operations such as reclaim space, network fence, encryption key rotation and volume replication to the CSI-Addons controller.

Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped

MongoDB MCP Server

Docker Hardened Image

A Model Context Protocol server for MongoDB that enables querying and schema discovery via MCP.

S3Proxy

Docker Hardened Image

S3Proxy implements the S3 API and proxies requests to backends such as the local filesystem, Azure Blob Storage, Google Cloud Storage, and other providers via Apache jclouds.