Calico CNI

Docker Hardened Image

Calico CNI plugin provides networking and network policy for Kubernetes clusters

CoreDNS

Docker Hardened Image

CoreDNS is a DNS server that chains plugins. It is written in Go and is designed to be fast and flexible. CoreDNS is used in cloud-native environments and is the default DNS server in Kubernetes.

Istio Ztunnel Helm chart

Docker Hardened Image

The ztunnel component of Istio's ambient mesh

NGINX Ingress Controller

Docker Hardened Image

NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project. Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.

Tailscale

Docker Hardened Image

Tailscale lets you securely connect devices and containers without exposing them to the public internet.

MetalLB Speaker

Docker Hardened Image

MetalLB speaker component announces LoadBalancer services to the network using Layer 2 ARP or BGP routing protocols on bare metal Kubernetes clusters.

Istio CNI Helm chart

Docker Hardened Image

Helm chart for deploying the Istio CNI plugin.

MetalLB Controller

Docker Hardened Image

MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.

Vertical Pod Autoscaler Recommender

Docker Hardened Image

Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.

AWS SigV4 Proxy

Docker Hardened Image

This project signs and proxies HTTP requests with Sigv4

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

AWS Network Policy Agent

Docker Hardened Image

The AWS Network Policy Agent enforces Kubernetes network policies on Amazon EKS nodes using eBPF-based traffic control programs for fine-grained pod-level network security.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

NodeLocal DNS Cache

Docker Hardened Image

Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS

Calico CSI

Docker Hardened Image

Calico CSI driver for secure connections from Kubernetes pods to local daemons.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

Knative Serving Autoscaler

Docker Hardened Image

Scales Knative Services in response to request-driven load metrics. The autoscaler is a control-plane component of Knative Serving. It collects per-revision load statistics from the activator and queue-proxies, computes the desired number of pods for each Revision, and drives scaling decisions including scale-to-zero.

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Knative Serving Webhook

Docker Hardened Image

Admission webhook for Knative Serving resources. The webhook is a control-plane component of Knative Serving. It defaults and validates Knative Serving custom resources through Kubernetes admission control, and validates the Serving ConfigMaps.

Vertical Pod Autoscaler Admission Controller

Docker Hardened Image

Admission webhook controller for Kubernetes Vertical Pod Autoscaler that sets resource requests on new pods.

Configurable HTTP Proxy

Docker Hardened Image

node-http-proxy plus a REST API for dynamic JupyterHub routing.

amazon-k8s-cni

Docker Hardened Image

Networking plugin for pod networking in Kubernetes using Elastic Network Interfaces on AWS.

Vertical Pod Autoscaler Updater

Docker Hardened Image

Monitors the VPA resources and compares current Pod resource requests with the recommendations, evicting and updating pod resources accordingly.

APISIX Ingress Controller

Docker Hardened Image

Controller to run the APISIX Gateway as a Kubernetes Ingress.

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

Kubernetes Ingress Default Backend

Docker Hardened Image

A minimal Kubernetes default backend server for unmatched ingress requests.

Cilium Hubble Export to Stdout

Docker Hardened Image

Streams Hubble network flow export logs to stdout for log collection

Calico Typha

Docker Hardened Image

Calico fan-out proxy that scales access to the Calico datastore for large clusters.

socat

Docker Hardened Image

Multipurpose relay for binary protocols

NetBox

Docker Hardened Image

NetBox is the open-source network infrastructure source of truth — IPAM and DCIM in one Django application.