Ollama

Docker Hardened Image

Run and serve large language models locally over an HTTP API (CPU inference).

Kubernetes Cloud Controller Manager (cloud-controller-manager)

Docker Hardened Image

Runs cloud-provider-specific control loops in the Kubernetes control plane. cloud-controller-manager embeds the cloud-specific control loops that integrate a Kubernetes cluster with the underlying cloud provider's APIs.

cert-manager-istio-csr

Docker Hardened Image

Certificate signing request agent for integrating cert-manager with Istio

Grafana Rollout Operator

Docker Hardened Image

A Kubernetes operator for coordinating the rollout of Grafana pods between different StatefulSets

Redis MCP Server

Docker Hardened Image

A Model Context Protocol server that lets AI agents interact with Redis databases using natural language.

OpenSearch Dashboards

Docker Hardened Image

OpenSearch Dashboards is a data visualization and user interface for OpenSearch

iojs

Docker Official Image

DEPRECATED; use "node" instead

Haskell

Docker Hardened Image

Haskell is a statically typed, purely functional programming language with the Glasgow Haskell Compiler (GHC).

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

Harbor Redis

Docker Hardened Image

Harbor Redis is the Redis component used by the Harbor container registry for session management, job queue, and caching. It ships a Harbor-specific redis.conf and healthcheck script on top of Redis.

julia

Docker Official Image

Julia is a high-level, high-performance dynamic programming language for technical computing.

ActiveMQ Artemis

Docker Hardened Image

Apache ActiveMQ Artemis is an open source project to build a multi-protocol, embeddable, very high performance, clustered, asynchronous messaging system.

k8ssandra-system-logger

Docker Hardened Image

k8ssandra-system-logger packages Vector (vectordotdev/vector) as a small sidecar image that tails Cassandra system logs and writes them to stdout. It is designed to run as a nonroot sidecar alongside Cassandra to surface /var/log/cassandra/*.log to container stdout for collection by cluster logging agents or centralized logging systems.

AWS SigV4 Proxy

Docker Hardened Image

This project signs and proxies HTTP requests with Sigv4

OpenCost UI

Docker Hardened Image

Web-based UI for OpenCost Kubernetes cost monitoring

nginx/nginx-ingress

NGINX Inc.

NGINX and NGINX Plus Ingress Controllers for Kubernetes

Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Kured

Docker Hardened Image

Kubernetes Reboot Daemon

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

SpiceDB

Docker Hardened Image

An open source, Google Zanzibar-inspired database for fine-grained authorization.

grafana/synthetic-monitoring-agent

Grafana Labs

Blackbox Exporter agent which executes checks for the Grafana Cloud Synthetic Monitoring service.

orientdb

Docker Official Image

OrientDB a Multi-Model Open Source NoSQL DBMS that combines graphs and documents.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Grafana Beyla

Docker Hardened Image

Grafana Beyla is an eBPF-based application auto-instrumentation tool that captures OpenTelemetry traces and metrics for web services and network flows without code changes.

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

AWS Private CA Issuer

Docker Hardened Image

AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

KServe Controller

Docker Hardened Image

A Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks.