Tekton CLI

Docker Hardened Image

The Tekton CLI (tkn) manages Tekton Pipelines, Tasks, and Triggers resources from the command line. It creates, starts, describes and follows the logs of pipeline and task runs against a Kubernetes cluster, and packages Tekton resources as OCI bundles.

APISIX Helm chart

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

httpbin

Docker Hardened Image

A simple HTTP request and response service for testing HTTP clients, libraries, and proxies.

Karma is an alert dashboard for Prometheus Alertmanager that aggregates alerts from multiple Alertmanager instances, deduplicates and groups them, and provides silence management.

k6-operator

Docker Hardened Image

An operator for running distributed k6 tests.

Azure CLI

Docker Hardened Image

Azure CLI is Microsoft's cross-platform command-line tool for creating and managing Azure resources.

Forklift Controller

Docker Hardened Image

Forklift Controller orchestrates migrations of virtual machines from VMware, oVirt, OpenStack, OVA, and Hyper-V to KubeVirt.

Yet Another CloudWatch Exporter (YACE)

Docker Hardened Image

YACE is a Prometheus exporter for AWS CloudWatch that auto-discovers resources through AWS tags and exposes their metrics with AWS tags as labels.

NGINX Ingress Controller Helm chart

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

Upstash Context7 MCP Server

Docker Hardened Image

A Model Context Protocol server from Upstash that exposes Context7 tools over MCP.

KServe LocalModel Controller

Docker Hardened Image

Enables local model caching and management.

Forklift Populator Controller

Docker Hardened Image

Kubernetes controller that populates persistent volumes during Forklift VM migrations. Part of the Forklift migration toolkit, the populator controller watches OvirtVolumePopulator, OpenstackVolumePopulator, and VSphereXcopyVolumePopulator custom resources and launches the matching populator pod to transfer VM disk data into the target PersistentVolumeClaim on KubeVirt.

Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

Falco

Docker Hardened Image

Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.

Datadog Cluster Agent

Docker Hardened Image

Datadog Cluster Agent runs centralized Kubernetes cluster-level checks, serves a custom-metrics provider for HPA, and acts as a proxy between node agents and the Kubernetes API.

Forklift Operator

Docker Hardened Image

Forklift Operator deploys and manages the Forklift toolkit for migrating virtual machines from VMware, oVirt, OpenStack, Hyper-V, EC2, and OVA sources to KubeVirt.

JupyterHub K8s Secret Sync

Docker Hardened Image

A minimal ACME certificate sync image for JupyterHub on Kubernetes.

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

Beat Exporter

Docker Hardened Image

Prometheus exporter for Elastic Beats stats endpoints.

Forklift API

Docker Hardened Image

Forklift API is the API server component of the Forklift VM migration toolkit. It serves the mutating and validating admission webhooks for Forklift custom resources and the auxiliary HTTP services the Forklift controller calls during migrations to KubeVirt.

CSI-Addons Sidecar

Docker Hardened Image

csi-addons-k8s-sidecar is the Kubernetes CSI-Addons sidecar that runs alongside a CSI driver to expose advanced storage operations such as reclaim space, network fence, encryption key rotation and volume replication to the CSI-Addons controller.

Multus CNI

Docker Hardened Image

Multus CNI is a CNI meta-plugin that enables attaching multiple network interfaces to Kubernetes pods

Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped

Codecov API

Docker Hardened Image

Codecov API is the Django REST and GraphQL backend of a self-hosted Codecov deployment, serving the dashboard, coverage uploads and repository webhooks.

S3Proxy

Docker Hardened Image

S3Proxy implements the S3 API and proxies requests to backends such as the local filesystem, Azure Blob Storage, Google Cloud Storage, and other providers via Apache jclouds.

MongoDB MCP Server

Docker Hardened Image

A Model Context Protocol server for MongoDB that enables querying and schema discovery via MCP.

OpenTelemetry Operator Helm chart

Docker Hardened Image

Kubernetes operator for managing OpenTelemetry Collectors and auto-instrumentation

GitLab Sidekiq

Docker Hardened Image

GitLab Sidekiq runs the background job processor for the GitLab Rails application, handling asynchronous work such as email delivery, repository operations, and CI/CD tasks.

Forklift OVA Provider Server

Docker Hardened Image

Forklift OVA Provider Server inventories OVA appliances on an NFS share and serves virtual machine, network, and disk metadata to the Forklift controller.

Milvus

Docker Hardened Image

Milvus is a high-performance, cloud-native vector database built for scalable vector similarity search, powering RAG, semantic search and recommendation systems.