Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped

MongoDB MCP Server

Docker Hardened Image

A Model Context Protocol server for MongoDB that enables querying and schema discovery via MCP.

Forklift virt-v2v

Docker Hardened Image

Forklift virt-v2v converts VM guest disks for migration to KubeVirt, wrapping libguestfs's virt-v2v tool

S3Proxy

Docker Hardened Image

S3Proxy implements the S3 API and proxies requests to backends such as the local filesystem, Azure Blob Storage, Google Cloud Storage, and other providers via Apache jclouds.

OpenTelemetry Operator Helm chart

Docker Hardened Image

Kubernetes operator for managing OpenTelemetry Collectors and auto-instrumentation

Forklift OVA Provider Server

Docker Hardened Image

Forklift OVA Provider Server inventories OVA appliances on an NFS share and serves virtual machine, network, and disk metadata to the Forklift controller.

Forklift OVA Proxy

Docker Hardened Image

Forklift OVA Proxy fronts the OVA provider inventory service, reverse proxying appliance requests from the Forklift console to the provider server inside the cluster.

Zot Helm chart

Docker Hardened Image

Zot is a production-ready, vendor-neutral OCI image registry with full OCI standards compliance and scalability.

Ansible Operator

Docker Hardened Image

Base image for Ansible-based Kubernetes operators built with the Operator SDK, bundling the ansible-operator runtime, ansible-core, ansible-runner and the Kubernetes Python client.

Calico Pod2Daemon FlexVol

Docker Hardened Image

Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.

Forklift Must-Gather

Docker Hardened Image

Forklift must-gather is the diagnostics collector for the Forklift VM migration toolkit. It gathers Forklift and KubeVirt custom resources, pod logs, and optional metrics into a support archive via oc adm must-gather.

Hyperledger Fabric Tools

Docker Hardened Image

CLI tools for managing Hyperledger Fabric networks

StackHawk MCP Server

Docker Hardened Image

A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the StackHawk application security testing platform.

Harbor Helm chart

Docker Hardened Image

Harbor - An open source trusted cloud native registry that stores, signs, and scans content

Forklift Hyper-V Provider Server

Docker Hardened Image

Forklift Hyper-V Provider Server validates exported Hyper-V disk paths on an SMB share for Forklift migration plans.

NVFlare

Docker Hardened Image

NVIDIA Federated Learning Application Runtime Environment for privacy-preserving distributed AI.

Jaeger

Docker Hardened Image

A minimal Jaeger v2 all-in-one distributed tracing image

Centrifugo

Docker Hardened Image

Centrifugo is a scalable real-time messaging server that adds WebSocket, SSE, and HTTP-streaming pub/sub to any application backend.

NATS Helm chart

Docker Hardened Image

A high-performance messaging system for cloud-native applications, on top of hardened DHI images.

Headlamp

Docker Hardened Image

Headlamp is a fully-featured, user-friendly and extensible web UI for Kubernetes that runs in-cluster or as a desktop application.

SendGrid Python

Docker Hardened Image

The official Twilio SendGrid Python client library for the SendGrid Web API v3, preinstalled on a hardened Python runtime.

GitHub MCP Server

Docker Hardened Image

GitHub's official MCP Server connects AI tools directly to GitHub's platform. This gives AI agents, assistants, and chatbots the ability to read repositories and code files, manage issues and PRs, analyze code, and automate workflows.

Tailscale Kubernetes Operator

Docker Hardened Image

Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.

Hyperledger Fabric Orderer

Docker Hardened Image

Orderer service that runs as part Hyperledger Fabric networks and provides an atomic broadcast ordering service for consumption by the peers

Amazon EKS Pod Identity Webhook

Docker Hardened Image

The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.

Secrets Store CSI Driver CRDs

Docker Hardened Image

Packages the Secrets Store CSI Driver CustomResourceDefinitions together with kubectl, so a cluster can register SecretProviderClass and SecretProviderClassPodStatus before the driver itself is deployed.

Forklift Console Plugin

Docker Hardened Image

OpenShift console dynamic plugin for Forklift, the Migration Toolkit for Virtualization. Adds the migration UI (providers, plans, network and storage mappings) for moving virtual machines from VMware vSphere, oVirt, OpenStack, and OVA to KubeVirt.

Selenium Node Chromium

Docker Hardened Image

Selenium Grid worker node running Chromium with chromedriver, the arm64-capable browser node for Selenium Grid 4.x. Registers with a Selenium Hub and serves WebDriver sessions backed by the open-source Chromium browser.

Forklift OpenStack Populator

Docker Hardened Image

Forklift OpenStack Populator streams a Glance image from an OpenStack source cloud into a Kubernetes PersistentVolumeClaim during a Forklift migration.

JupyterHub K8s Image Awaiter

Docker Hardened Image

A minimal init container image for JupyterHub that waits for images to be pre-pulled on Kubernetes nodes.