SPIFFE CSI Driver

Docker Hardened Image

Kubernetes CSI driver that injects the SPIFFE Workload API socket into workload pods as an ephemeral inline volume.

Qdrant

Docker Hardened Image

A high-performance vector database and similarity search engine for building the next generation of AI applications.

Perplexity MCP Server

Docker Hardened Image

A Model Context Protocol server that connects AI assistants to the Perplexity API for real-time web search, reasoning, and research.

JupyterHub K8s Secret Sync

Docker Hardened Image

A minimal ACME certificate sync image for JupyterHub on Kubernetes.

Git MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools to read, search, and manipulate Git repositories programmatically via LLMs.

Snyk CLI

Docker Hardened Image

Find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code

Grafana Mimir

Docker Hardened Image

Scalable, multi-tenant, long-term storage backend for Prometheus metrics.

Console for Red Hat OpenShift

Docker Hardened Image

A web console (bridge) for Red Hat OpenShift and OKD clusters that serves the management UI and proxies authenticated requests to the Kubernetes API and in-cluster services.

Tekton CLI

Docker Hardened Image

The Tekton CLI (tkn) manages Tekton Pipelines, Tasks, and Triggers resources from the command line. It creates, starts, describes and follows the logs of pipeline and task runs against a Kubernetes cluster, and packages Tekton resources as OCI bundles.

Kubeflow Pipelines - Metadata Writer

Docker Hardened Image

The Kubeflow Pipelines Metadata Writer handles pipeline execution metadata in the Kubeflow Pipeline ecosystem.

vSphere CSI Syncer

Docker Hardened Image

Metadata syncer for the VMware vSphere CSI driver. Runs alongside the CSI controller and synchronizes volume metadata between Kubernetes and the vSphere Cloud Native Storage (CNS) inventory.

Ceph CSI Operator

Docker Hardened Image

Ceph CSI Operator is a Kubernetes operator that deploys and manages the Ceph CSI drivers for RBD, CephFS, NFS, and NVMe-oF storage workloads.

Open Cluster Management Registration

Docker Hardened Image

Registration controller and agent for Open Cluster Management hub and spoke cluster lifecycle.

AuthService

Docker Hardened Image

Envoy external authorization service that moves OIDC/OAuth2 token acquisition out of application code and into the Istio mesh

Forklift Operator

Docker Hardened Image

Forklift Operator deploys and manages the Forklift toolkit for migrating virtual machines from VMware, oVirt, OpenStack, Hyper-V, EC2, and OVA sources to KubeVirt.

Time MCP Server

Docker Hardened Image

A Model Context Protocol server providing tools for time queries and timezone conversions for LLMs.

Forklift Populator Controller

Docker Hardened Image

Kubernetes controller that populates persistent volumes during Forklift VM migrations. Part of the Forklift migration toolkit, the populator controller watches OvirtVolumePopulator, OpenstackVolumePopulator, and VSphereXcopyVolumePopulator custom resources and launches the matching populator pod to transfer VM disk data into the target PersistentVolumeClaim on KubeVirt.

Handshake service for kernel TLS consumers

Apigee Edge Microgateway

Docker Hardened Image

Apigee Edge Microgateway is a secure, HTTP-based message processor for APIs.

Forklift virt-v2v

Docker Hardened Image

Forklift virt-v2v converts VM guest disks for migration to KubeVirt, wrapping libguestfs's virt-v2v tool

Forklift Controller

Docker Hardened Image

Forklift Controller orchestrates migrations of virtual machines from VMware, oVirt, OpenStack, OVA, and Hyper-V to KubeVirt.

Milvus

Docker Hardened Image

Milvus is a high-performance, cloud-native vector database built for scalable vector similarity search, powering RAG, semantic search and recommendation systems.

Falco

Docker Hardened Image

Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.

Airflow PgBouncer Exporter exposes PgBouncer connection pool statistics as Prometheus metrics, covering client and server connections, pool health, and query statistics.

Headlamp

Docker Hardened Image

Headlamp is a fully-featured, user-friendly and extensible web UI for Kubernetes that runs in-cluster or as a desktop application.

Calico Webhooks

Docker Hardened Image

Validating admission webhook server for Calico tiered RBAC enforcement on policy resources.

Hyperledger Fabric Tools

Docker Hardened Image

CLI tools for managing Hyperledger Fabric networks

OpenResty

Docker Hardened Image

OpenResty is a dynamic web platform that bundles an enhanced NGINX core with LuaJIT and a collection of Lua libraries and NGINX modules.

PgBouncer Exporter

Docker Hardened Image

PgBouncer Exporter exposes PgBouncer connection pool statistics as Prometheus metrics, covering client and server connections, pool health, and query statistics.

Multus CNI

Docker Hardened Image

Multus CNI is a CNI meta-plugin that enables attaching multiple network interfaces to Kubernetes pods