Hatchet Lite

Docker Hardened Image

An orchestration engine for background tasks, AI agents, and durable workflows

APISIX Ingress Controller

Docker Hardened Image

Controller to run the APISIX Gateway as a Kubernetes Ingress.

Data Prepper

Docker Hardened Image

Server-side data collector for trace, log, and metric pipelines that filter, enrich, transform, and aggregate observability data for OpenSearch.

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Velero Plugin for Azure

Docker Hardened Image

Plugin to support running Velero on Azure.

OpenTelemetry Go Autoinstrumentation

Docker Hardened Image

This is a Golang autoinstrumentation agent used by the OpenTelemetry Operator

Couchbase MCP Server

Docker Hardened Image

The official Couchbase MCP server that connects AI tools and assistants to Couchbase clusters — running SQL++ queries, browsing buckets, scopes, and collections, performing key-value operations, and checking cluster health — over stdio transport, read-only by default.

Azure Functions (Python)

Docker Hardened Image

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

SeaweedFS COSI Driver

Docker Hardened Image

SeaweedFS COSI Driver is a Kubernetes Container Object Storage Interface implementation for dynamic object storage provisioning.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Socket CLI

Docker Hardened Image

Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.

socat

Docker Hardened Image

Multipurpose relay for binary protocols

Kubernetes Autoscaler Addon Resizer

Docker Hardened Image

A container that watches over another container in a deployment and vertically scales the dependent container up and down based on the number of nodes in the cluster.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Dapr Injector

Docker Hardened Image

Kubernetes admission controller that automatically injects the Dapr sidecar container into pods, enabling Dapr capabilities for applications.

Dapr Placement Service

Docker Hardened Image

Kubernetes control plane service that manages actor placement using a consistent hash ring, enabling distributed actor instances across the cluster with automatic rebalancing.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

CDI API Server

Docker Hardened Image

CDI API Server provides a Kubernetes API extension for managing virtual machine disk image imports in KubeVirt

CSI Hostpath Plugin

Docker Hardened Image

csi-hostpath-plugin is a Kubernetes CSI driver that uses the host's filesystem as storage, commonly used for testing and development purposes.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

Zookeeper

Docker Hardened Image

Apache Zookeeper is a distributed coordination service for distributed applications

CDI Cloner

Docker Hardened Image

CDI Cloner clones persistent volume claims for virtual machine disk management in Kubernetes

Dapr Sentry

Docker Hardened Image

Dapr Sentry certificate authority that issues mTLS certificates for secure communication between Dapr sidecars and control plane components.

K8ssandra Cass Operator

Docker Hardened Image

Kubernetes operator that automates deployment and management of Apache Cassandra clusters. Handles provisioning, scaling, rolling restarts, upgrades, and failure remediation for production-grade Cassandra workloads in Kubernetes environments.

Dapr Operator

Docker Hardened Image

Kubernetes operator that manages Dapr component Custom Resources (state stores, pub/sub, bindings, etc.) and provides validation webhooks for component configurations.

drbd-shutdown-guard

Docker Hardened Image

An init-container utility that ensures DRBD resources are properly handled during system shutdown

Open Cluster Management Work

Docker Hardened Image

Work agent for dispatching Kubernetes manifests to managed clusters via the ManifestWork API.

amazon-k8s-cni-init

Docker Hardened Image

Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.

Cilium Hubble Export to Stdout

Docker Hardened Image

Streams Hubble network flow export logs to stdout for log collection