socat

Docker Hardened Image

Multipurpose relay for binary protocols

Git MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to read, search, and manipulate Git repositories programmatically via LLMs.

Object Storage Sidecar

Docker Hardened Image

Object storage sidecar that manages bucket lifecycle by coordinating with COSI drivers.

Configurable HTTP Proxy

Docker Hardened Image

node-http-proxy plus a REST API for dynamic JupyterHub routing.

Gatekeeper CRDs

Docker Hardened Image

Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.

Nginx Exporter

Docker Hardened Image

Nginx exporter makes it possible to monitor Nginx or Nginx Plus with Prometheus by exposing metrics in Prometheus format.

Time MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools for time queries and timezone conversions for LLMs.

Harbor Redis

Docker Hardened Image

Harbor Redis is the Redis component used by the Harbor container registry for session management, job queue, and caching. It ships a Harbor-specific redis.conf and healthcheck script on top of Redis.

drbd-utils

Docker Hardened Image

DRBD user-space utilities for managing DRBD resources

Local Path Provisioner

Docker Hardened Image

Kubernetes controller that dynamically provisions local persistent volumes backed by node-local storage using hostPath or local volume types.

Upstash Context7 MCP Server

Docker Hardened Image

A Model Context Protocol server from Upstash that exposes Context7 tools over MCP.

Varnish Cache

Docker Hardened Image

Varnish Cache is a high-performance HTTP accelerator and caching reverse proxy designed to speed up web applications by caching content in memory and serving it at very high throughput.

Apache Superset

Docker Hardened Image

Apache Superset is a modern data exploration and visualization platform.

WireMock

Docker Hardened Image

Flexible API mocking tool for service virtualization that enables developers to simulate HTTP-based APIs for testing purposes.

Cilium Hubble Proto

Docker Hardened Image

Protocol buffer definitions for Hubble, the networking and security observability platform for Cilium

Trust Manager Package

Docker Hardened Image

A trust manager package image that provides Debian CA certificates for use as an init container with cert-manager trust-manager.

Calico CTL

Docker Hardened Image

Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.

Hatchet Lite

Docker Hardened Image

An orchestration engine for background tasks, AI agents, and durable workflows

Source Watcher

Docker Hardened Image

Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.

Cilium startup script

Docker Hardened Image

Cilium startup script

MongoDB Controllers for Kubernetes (MCK)

Docker Hardened Image

A Kubernetes operator that enables users to run MongoDB in Kubernetes

Grafana Agent Operator

Docker Hardened Image

a Kubernetes operator that simplifies deploying and managing Grafana Agent instances for collecting metrics, logs, and traces.

SPIFFE Helper

Docker Hardened Image

Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.

KServe LocalModelNode Agent

Docker Hardened Image

Enables local model node management and caching.

KServe Agent

Docker Hardened Image

KServe Agent is a component that manages model serving workloads in KServe.

KServe LocalModel Controller

Docker Hardened Image

Enables local model caching and management.

KServe Router

Docker Hardened Image

The routing component for KServe inference graphs, enabling complex model serving patterns with intelligent traffic routing.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.