Harbor DB

Docker Hardened Image

Harbor DB is the PostgreSQL database component used by the Harbor container registry for persistent storage of metadata, users, projects, and policies. It ships Harbor-specific initialization and upgrade scripts with the PostgreSQL major versions required by each supported Harbor release.

Harbor Registry Control

Docker Hardened Image

A minimal HTTP service providing management APIs for Docker registry operations like garbage collection and health monitoring

Notification Controller

Docker Hardened Image

Flux CD component that dispatches events to external notification providers and exposes a webhook receiver endpoint for triggering reconciliation from external systems.

Istio Install CNI

Docker Hardened Image

Istio CNI installer image and daemonset for Kubernetes environments

Helm Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Helm charts declared as HelmRelease resources in Kubernetes, enabling GitOps-driven Helm deployments.

Dart

Docker Hardened Image

Dart is a client-optimized programming language for fast apps on any platform.

Calico Node

Docker Hardened Image

Calico's per-host DaemonSet container image. Provides CNI networking and policy for Kubernetes.

RabbitMQ

Docker Hardened Image

RabbitMQ is an open source multi-protocol messaging broker.

Argo CD Image Updater

Docker Hardened Image

A tool to automatically update container images of Kubernetes workloads managed by Argo CD.

Source Controller

Docker Hardened Image

Flux CD component that acquires artifacts from external sources such as Git repositories, Helm repositories, and OCI registries, making them available to other Flux controllers.

Prometheus Adapter Helm chart

Docker Hardened Image

Helm chart for Prometheus Adapter (custom.metrics.k8s.io API) using Docker Hardened Images.

Docker Scout SBOM Indexer

Docker Hardened Image

A specialized tool for generating Software Bill of Materials (SBOM) by scanning file systems and indexing packages for Docker Scout and BuildKit integration.

CouchDB

Docker Hardened Image

CouchDB is a database that uses JSON for documents, an HTTP API, & JavaScript declarative indexing.

Cilium Operator Azure

Docker Hardened Image

Cilium Operator for Azure environments

kube-rbac-proxy

Docker Hardened Image

a small HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using SubjectAccessReview.

Traefik Helm chart

Docker Hardened Image

Traefik, The Cloud Native Edge Router

Metrics Server

Docker Hardened Image

Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines. It collects resource metrics from Kubelets and exposes them in Kubernetes apiserver through Metrics API for use by Horizontal Pod Autoscaler and Vertical Pod Autoscaler.

Cilium Clustermesh API Server

Docker Hardened Image

Cilium Clustermesh API Server is a load balancing API for Cilium clusters

External DNS Helm chart

Docker Hardened Image

ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.

Harbor Job Service is the asynchronous task execution component of Harbor registry that handles background operations like replication, garbage collection, vulnerability scanning, and retention policies.

Kubernetes Scheduler (kube-scheduler)

Docker Hardened Image

Schedules pods onto nodes. kube-scheduler watches for newly created pods with no assigned node, and selects a node for them to run on.

Calico Kube Controllers

Docker Hardened Image

Calico controller manager that reconciles IPAM, network policy, and Calico CRD state.

Logstash

Docker Hardened Image

Logstash is a tool for managing events and logs.

Kyverno CLI

Docker Hardened Image

The Kyverno Command Line Interface (CLI) is designed to validate and test policy behavior to resources prior to adding them to a cluster.

Virt Handler

Docker Hardened Image

Virt Handler manages virtual machine processes on each node in a KubeVirt cluster

CloudNativePG Helm chart

Docker Hardened Image

CloudNativePG is the Kubernetes operator that covers the full lifecycle of a highly available PostgreSQL database cluster with a primary/standby architecture, using native streaming replication.

SPIFFE SPIRE Server

Docker Hardened Image

Central SPIRE control plane that issues and manages SPIFFE workload identities.

Kubernetes Proxy (kube-proxy)

Docker Hardened Image

Maintains network rules on nodes to enable service virtual IPs and load balancing. kube-proxy reflects services defined in the Kubernetes API and maintains network rules on nodes to implement service behavior.

Fluent Bit

Docker Hardened Image

Fluent Bit is an open source data collector for unified logging layer.

SPIFFE SPIRE Agent

Docker Hardened Image

Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.