amazon-k8s-cni-init

Docker Hardened Image

Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.

HAProxy Helm chart

Docker Hardened Image

The Reliable, High Performance TCP/HTTP Load Balancer

Configurable HTTP Proxy

Docker Hardened Image

node-http-proxy plus a REST API for dynamic JupyterHub routing.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Cilium Hubble Export to Stdout

Docker Hardened Image

Streams Hubble network flow export logs to stdout for log collection

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

WBITT Network Multitool

Docker Hardened Image

A multi-arch multitool for container and network testing and troubleshooting. Includes a comprehensive set of networking utilities and a minimal nginx web server for easy access and testing. The -extra flavor includes additional tools for advanced networking, database connectivity, and security testing.

Calico Typha

Docker Hardened Image

Calico fan-out proxy that scales access to the Calico datastore for large clusters.

Varnish Cache

Docker Hardened Image

Varnish Cache is a high-performance HTTP accelerator and caching reverse proxy designed to speed up web applications by caching content in memory and serving it at very high throughput.

Kubernetes Ingress Default Backend

Docker Hardened Image

A minimal Kubernetes default backend server for unmatched ingress requests.

Multus Dynamic Networks Controller

Docker Hardened Image

A Kubernetes controller granting the ability to plug/unplug network interfaces to/from running pods.

Istio Egress Helm chart

Docker Hardened Image

Helm chart for deploying Istio gateways.

Istio Ingress Helm chart

Docker Hardened Image

Helm chart for deploying Istio gateways.

Cilium startup script

Docker Hardened Image

Cilium startup script

Emissary-Ingress

Docker Hardened Image

Emissary-ingress is an open-source, developer-centric, Kubernetes-native API gateway built on Envoy Proxy.

Istio Gateway Helm chart

Docker Hardened Image

Helm chart for deploying the Istio Gateway.

Istio CNI Helm chart

Docker Hardened Image

Helm chart for deploying the Istio CNI plugin.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

NetBox

Docker Hardened Image

NetBox is the open-source network infrastructure source of truth — IPAM and DCIM in one Django application.

Calico Whisker Backend

Docker Hardened Image

Backend API service for the Calico Whisker network flow visualization UI.

Calico CTL

Docker Hardened Image

Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.

Kubernetes Cluster Autoscaler Helm Chart

Docker Hardened Image

Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster.

Tailscale Operator Helm chart

Docker Hardened Image

Helm chart for the Tailscale Kubernetes Operator, which manages Tailscale resources including ingress, egress, subnet routers, and proxies within a cluster.

kube-vip Helm chart

Docker Hardened Image

Virtual IP and load balancer for Kubernetes

Calico Goldmane

Docker Hardened Image

Calico flow aggregation service for network flow telemetry.

Calico Node Driver Registrar

Docker Hardened Image

CSI node driver registrar repackaged by Calico to register the Calico CSI driver with the kubelet.

Rancher Fleet Agent