Kyverno

Docker Hardened Image

Kyverno is a Kubernetes-native policy engine for validating, mutating, and generating Kubernetes resources using YAML policies.

Helm

Docker Hardened Image

Helm is the package manager for Kubernetes that helps you manage Kubernetes applications.

MySQL

Docker Hardened Image

MySQL is a widely used, open-source relational database management system (RDBMS).

Kyverno Background Controller

Docker Hardened Image

Kyverno is a component that continuously monitors and enforces policies on existing resources in the cluster, ensuring ongoing compliance.

Kyverno Reports Controller

Docker Hardened Image

Kyverno Reports Controller is a component that continuously monitors and enforces policies on existing resources in a Kubernetes

Cilium

Docker Hardened Image

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

Kyverno Cleanup Controller

Docker Hardened Image

Kyverno is a component that continuously monitors and enforces policies on existing resources in the cluster, ensuring ongoing compliance.

Virt Launcher

Docker Hardened Image

Virt Launcher provides the runtime environment for virtual machines in KubeVirt

Kyverno Init

Docker Hardened Image

Kyverno is a component that continuously monitors and enforces policies on existing resources in a kubernetes cluster, ensuring ongoing compliance.

pgvector

Docker Hardened Image

PostgreSQL with the pgvector extension for open-source vector similarity search.

Prometheus Alertmanager

Docker Hardened Image

Alertmanager deduplicates, groups, and routes alerts from Prometheus to notification receivers and supports silences, inhibition and HA clustering.

Cilium Operator

Docker Hardened Image

Operator managing Cilium networking and security policies

Virt API

Docker Hardened Image

Virt API provides the Kubernetes API extension for managing virtual machines in KubeVirt

KEDA Admission Webhooks

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

AWS Load Balancer Controller

Docker Hardened Image

The AWS Load Balancer Controller manages AWS Elastic Load Balancers for Kubernetes clusters, provisioning ALBs for Ingress resources and NLBs for Service resources.

Istio Proxy v2

Docker Hardened Image

Istio proxy (Envoy with Istio extensions) - high-performance service mesh sidecar proxy

Static

Docker Hardened Image

A very minimal image that is most useful in the context of running binary executables, such as those built from Rust and Golang.

Cilium Operator AWS

Docker Hardened Image

cilium-operator-aws leverages AWS-native networking capabilities while providing advanced network security and observability features

Istio Ztunnel

Docker Hardened Image

The ztunnel component of Istio's ambient mesh

Argo Workflow Controller

Docker Hardened Image

Argo Workflow Controller is a Kubernetes-native workflow engine supporting DAG and step-based workflows.

Grafana Loki Canary

Docker Hardened Image

Loki Canary - Test tool for Grafana Loki installations

datadog/agent

Datadog

Docker container for the new Datadog Agent

nats-streaming

Docker Official Image

DEPRECATED; An open-source, high-performance, cloud native messaging streaming system.

Istio Install CNI

Docker Hardened Image

Istio CNI installer image and daemonset for Kubernetes environments

Harbor Registry Control

Docker Hardened Image

A minimal HTTP service providing management APIs for Docker registry operations like garbage collection and health monitoring

Harbor DB

Docker Hardened Image

Harbor DB is the PostgreSQL database component used by the Harbor container registry for persistent storage of metadata, users, projects, and policies. It ships Harbor-specific initialization and upgrade scripts with the PostgreSQL major versions required by each supported Harbor release.

Kustomize Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Kustomize-based manifests declared as Kustomization resources in Kubernetes, enabling GitOps-driven continuous delivery.

Ceph (Rook)

Docker Hardened Image

Ceph is a distributed storage system providing object, block, and file storage interfaces. This image contains Ceph daemon binaries for use with the Rook Kubernetes operator for cloud-native storage orchestration.

adoptopenjdk

Docker Official Image

DEPRECATED; use https://hub.docker.com/_/eclipse-temurin/

Notification Controller

Docker Hardened Image

Flux CD component that dispatches events to external notification providers and exposes a webhook receiver endpoint for triggering reconciliation from external systems.