MLflow Helm chart

Docker Hardened Image

MLflow is an open source platform for managing the end-to-end machine learning lifecycle, including experiment tracking, model registry, and deployment.

Headlamp

Docker Hardened Image

Headlamp is a fully-featured, user-friendly and extensible web UI for Kubernetes that runs in-cluster or as a desktop application.

wait-for-it

Docker Hardened Image

A pure bash script to test and wait on the availability of a TCP host and port. Useful for synchronizing the spin-up of interdependent services in Docker Compose.

R

Docker Hardened Image

R is a free software environment for statistical computing and graphics.

Ory Oathkeeper Maester

Docker Hardened Image

Kubernetes controller that watches Ory Oathkeeper Rule custom resources and renders them into the access rules ConfigMap or file that Ory Oathkeeper consumes.

Ansible Operator

Docker Hardened Image

Base image for Ansible-based Kubernetes operators built with the Operator SDK, bundling the ansible-operator runtime, ansible-core, ansible-runner and the Kubernetes Python client.

Secrets Store CSI Driver CRDs

Docker Hardened Image

Packages the Secrets Store CSI Driver CustomResourceDefinitions together with kubectl, so a cluster can register SecretProviderClass and SecretProviderClassPodStatus before the driver itself is deployed.

Centrifugo

Docker Hardened Image

Centrifugo is a scalable real-time messaging server that adds WebSocket, SSE, and HTTP-streaming pub/sub to any application backend.

Jupyter Data Science Notebook

Docker Hardened Image

A minimal Jupyter Notebook image with Python, R, and Julia for multi-language data science workflows.

AWS Provider for Secrets Store CSI Driver

Docker Hardened Image

The AWS provider for the Secrets Store CSI Driver fetches secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store and mounts them into Kubernetes pods as files, supporting both IRSA and EKS Pod Identity authentication.

Forklift vSphere Copy Offload Populator

Docker Hardened Image

Forklift vSphere Copy Offload Populator clones VMware source disks directly on storage arrays through vSphere XCOPY, populating Kubernetes PersistentVolumeClaims without host data paths.

Envoy Contrib

Docker Hardened Image

Envoy built with the contrib extensions, adding protocol filters such as Postgres, MySQL, Kafka, SIP, and RocketMQ on top of the core high-performance L7 proxy.

Memory MCP Server

Docker Hardened Image

A Model Context Protocol server that provides ephemeral and persistent memory tools for MCP clients.

Kyverno Policies Helm chart

Docker Hardened Image

Kubernetes Pod Security Standards implemented as Kyverno policies.

NATS Helm chart

Docker Hardened Image

A high-performance messaging system for cloud-native applications, on top of hardened DHI images.

Azure ResourceManager Exporter

Docker Hardened Image

Prometheus exporter for Azure Resource Manager quotas, costs, resource health, IAM, and Defender security metrics.

Confluent Platform Kafka

Docker Hardened Image

Apache Kafka packaged for Confluent Platform, configured through KAFKA_* environment variables by the Confluent container launch scripts.

Trust-Manager Helm chart

Docker Hardened Image

trust-manager manages TLS trust bundles in Kubernetes and OpenShift clusters.

NGINX LDAP Auth

Docker Hardened Image

LDAP authentication daemon for the NGINX auth_request module, supporting OpenLDAP and Active Directory.

Drupal Nginx

Docker Hardened Image

Nginx web server preconfigured with the wodby virtual host presets for Drupal, plus WordPress, Laravel, Django, Matomo, and plain PHP.

Authelia

Docker Hardened Image

Open-source authentication and authorization server with a login portal, single sign-on, and multi-factor authentication.

OpenTelemetry Java Autoinstrumentation

Docker Hardened Image

This is a Java autoinstrumentation agent used by the OpenTelemetry Operator

GitHub Actions Runner

Docker Hardened Image

Self-hosted runner that listens for and executes GitHub Actions workflow jobs.

Selenium Hub

Docker Hardened Image

Central coordinator of a Selenium Grid that receives WebDriver session requests from test clients and routes them to registered browser Nodes, enabling parallel and distributed browser automation at scale.

Forklift CLI Download

Docker Hardened Image

Forklift CLI Download serves the kubectl-mtv command line client binaries for Linux, macOS, and Windows over TLS for the OpenShift console CLI download page.

Flux Operator

Docker Hardened Image

Kubernetes operator that manages the lifecycle of Flux CD, providing declarative install, upgrade, and configuration of the GitOps toolkit along with a web UI for monitoring the delivery pipelines.

Stunnel

Docker Hardened Image

stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.

ShellCheck

Docker Hardened Image

ShellCheck is a shell script static analysis tool that gives warnings and suggestions for bash/sh shell scripts to point out and clarify syntax issues, semantic problems and subtle caveats, corner cases and pitfalls

Cilium Helm chart

Docker Hardened Image

eBPF-based Networking, Security, and Observability for Kubernetes

MongoDB Helm chart

Docker Hardened Image

MongoDB is a source-available cross-platform document-oriented database program.