Gatekeeper CRDs

Docker Hardened Image

Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.

Vertical Pod Autoscaler Updater

Docker Hardened Image

Monitors the VPA resources and compares current Pod resource requests with the recommendations, evicting and updating pod resources accordingly.

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

Socket CLI

Docker Hardened Image

Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.

FleetConfig Controller

Docker Hardened Image

Kubernetes controller for managing Open Cluster Management FleetConfig hub and spoke resources.

Hatchet Lite

Docker Hardened Image

An orchestration engine for background tasks, AI agents, and durable workflows

docker/ucp-auth

Docker, Inc.

Please refer to the docker/ucp image for more information

APISIX Ingress Controller

Docker Hardened Image

Controller to run the APISIX Gateway as a Kubernetes Ingress.

Open source framework for processing, monitoring, and alerting on time series data

Piraeus Operator

Docker Hardened Image

Kubernetes operator that manages LINSTOR clusters and automates deployment, scaling, and management of LINSTOR storage clusters in Kubernetes.

amazon-k8s-cni

Docker Hardened Image

Networking plugin for pod networking in Kubernetes using Elastic Network Interfaces on AWS.

OpenTelemetry Go Autoinstrumentation

Docker Hardened Image

This is a Golang autoinstrumentation agent used by the OpenTelemetry Operator

Couchbase MCP Server

Docker Hardened Image

The official Couchbase MCP server that connects AI tools and assistants to Couchbase clusters — running SQL++ queries, browsing buckets, scopes, and collections, performing key-value operations, and checking cluster health — over stdio transport, read-only by default.

VictoriaMetrics VMAuth

Docker Hardened Image

VictoriaMetrics VMAuth is an HTTP proxy for authorizing, routing, and load balancing requests to VictoriaMetrics components.

Data Prepper

Docker Hardened Image

Server-side data collector for trace, log, and metric pipelines that filter, enrich, transform, and aggregate observability data for OpenSearch.

r-base

Docker Official Image

R is a system for statistical computation and graphics.

Velero Plugin for Azure

Docker Hardened Image

Plugin to support running Velero on Azure.

Configurable HTTP Proxy

Docker Hardened Image

node-http-proxy plus a REST API for dynamic JupyterHub routing.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

Kubernetes Autoscaler Addon Resizer

Docker Hardened Image

A container that watches over another container in a deployment and vertically scales the dependent container up and down based on the number of nodes in the cluster.

Dapr Placement Service

Docker Hardened Image

Kubernetes control plane service that manages actor placement using a consistent hash ring, enabling distributed actor instances across the cluster with automatic rebalancing.

Ollama

Docker Hardened Image

Run and serve large language models locally over an HTTP API (CPU inference).

Dapr Injector

Docker Hardened Image

Kubernetes admission controller that automatically injects the Dapr sidecar container into pods, enabling Dapr capabilities for applications.

Azure Functions (Python)

Docker Hardened Image

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

Kubernetes Ingress Default Backend

Docker Hardened Image

A minimal Kubernetes default backend server for unmatched ingress requests.

Git-sync

Docker Hardened Image

git-sync is a sidecar that pulls a git repository into a local directory, keeping it synced to a remote.

socat

Docker Hardened Image

Multipurpose relay for binary protocols

SeaweedFS COSI Driver

Docker Hardened Image

SeaweedFS COSI Driver is a Kubernetes Container Object Storage Interface implementation for dynamic object storage provisioning.

Connaisseur

Docker Hardened Image

A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.