JupyterHub K8s Secret Sync

Docker Hardened Image

A minimal ACME certificate sync image for JupyterHub on Kubernetes.

Airflow PgBouncer Exporter exposes PgBouncer connection pool statistics as Prometheus metrics, covering client and server connections, pool health, and query statistics.

Calico Webhooks

Docker Hardened Image

Validating admission webhook server for Calico tiered RBAC enforcement on policy resources.

Elastic Cloud on Kubernetes (ECK) Operator

Docker Hardened Image

Kubernetes operator for managing Elasticsearch, Kibana, APM Server, and other Elastic Stack applications

Forklift Populator Controller

Docker Hardened Image

Kubernetes controller that populates persistent volumes during Forklift VM migrations. Part of the Forklift migration toolkit, the populator controller watches OvirtVolumePopulator, OpenstackVolumePopulator, and VSphereXcopyVolumePopulator custom resources and launches the matching populator pod to transfer VM disk data into the target PersistentVolumeClaim on KubeVirt.

Karma is an alert dashboard for Prometheus Alertmanager that aggregates alerts from multiple Alertmanager instances, deduplicates and groups them, and provides silence management.

httpbin

Docker Hardened Image

A simple HTTP request and response service for testing HTTP clients, libraries, and proxies.

APISIX Ingress Controller Helm chart

Docker Hardened Image

The APISIX Ingress Controller Helm chart is an open source project for running the APISIX Gateway as a Kubernetes Ingress.

Forklift Controller

Docker Hardened Image

Forklift Controller orchestrates migrations of virtual machines from VMware, oVirt, OpenStack, OVA, and Hyper-V to KubeVirt.

Milvus

Docker Hardened Image

Milvus is a high-performance, cloud-native vector database built for scalable vector similarity search, powering RAG, semantic search and recommendation systems.

Forklift Operator

Docker Hardened Image

Forklift Operator deploys and manages the Forklift toolkit for migrating virtual machines from VMware, oVirt, OpenStack, Hyper-V, EC2, and OVA sources to KubeVirt.

KServe LocalModelNode Agent

Docker Hardened Image

Enables local model node management and caching.

k6-operator

Docker Hardened Image

An operator for running distributed k6 tests.

APISIX Helm chart

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

Kiali Server Helm chart

Docker Hardened Image

web-based console for observability and configuration validation of the Istio service mesh

Falco

Docker Hardened Image

Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.

Authelia

Docker Hardened Image

Open-source authentication and authorization server with a login portal, single sign-on, and multi-factor authentication.

Datadog Cluster Agent

Docker Hardened Image

Datadog Cluster Agent runs centralized Kubernetes cluster-level checks, serves a custom-metrics provider for HPA, and acts as a proxy between node agents and the Kubernetes API.

NGINX Ingress Controller Helm chart

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

Multus CNI

Docker Hardened Image

Multus CNI is a CNI meta-plugin that enables attaching multiple network interfaces to Kubernetes pods

Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

KServe LocalModel Controller

Docker Hardened Image

Enables local model caching and management.

Upstash Context7 MCP Server

Docker Hardened Image

A Model Context Protocol server from Upstash that exposes Context7 tools over MCP.

Forklift oVirt Populator

Docker Hardened Image

Forklift oVirt Populator downloads a disk from an oVirt engine into a Kubernetes PersistentVolumeClaim during a Forklift migration, bundling the ovirt-img client and the QEMU disk tools it runs.

vSphere CSI Syncer

Docker Hardened Image

Metadata syncer for the VMware vSphere CSI driver. Runs alongside the CSI controller and synchronizes volume metadata between Kubernetes and the vSphere Cloud Native Storage (CNS) inventory.

Beat Exporter

Docker Hardened Image

Prometheus exporter for Elastic Beats stats endpoints.

Forklift API

Docker Hardened Image

Forklift API is the API server component of the Forklift VM migration toolkit. It serves the mutating and validating admission webhooks for Forklift custom resources and the auxiliary HTTP services the Forklift controller calls during migrations to KubeVirt.

CSI-Addons Sidecar

Docker Hardened Image

csi-addons-k8s-sidecar is the Kubernetes CSI-Addons sidecar that runs alongside a CSI driver to expose advanced storage operations such as reclaim space, network fence, encryption key rotation and volume replication to the CSI-Addons controller.

Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped