Notification Controller

Docker Hardened Image

Flux CD component that dispatches events to external notification providers and exposes a webhook receiver endpoint for triggering reconciliation from external systems.

Docker Scout SBOM Indexer

Docker Hardened Image

A specialized tool for generating Software Bill of Materials (SBOM) by scanning file systems and indexing packages for Docker Scout and BuildKit integration.

Harbor Registry Control

Docker Hardened Image

A minimal HTTP service providing management APIs for Docker registry operations like garbage collection and health monitoring

Helm Controller

Docker Hardened Image

Flux CD component that manages the lifecycle of Helm charts declared as HelmRelease resources in Kubernetes, enabling GitOps-driven Helm deployments.

Elasticsearch

Docker Hardened Image

Elasticsearch is a powerful open source search and analytics engine that makes data easy to explore.

Docker dind

Docker Hardened Image

Docker-in-Docker (dind) runs a full Docker Engine inside a container so you can build and run containers within a container, for CI pipelines and nested workloads.

Harbor Job Service is the asynchronous task execution component of Harbor registry that handles background operations like replication, garbage collection, vulnerability scanning, and retention policies.

Harbor DB

Docker Hardened Image

Harbor DB is the PostgreSQL database component used by the Harbor container registry for persistent storage of metadata, users, projects, and policies. It ships Harbor-specific initialization and upgrade scripts on top of PostgreSQL 14 and 15.

Metrics Server

Docker Hardened Image

Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines. It collects resource metrics from Kubelets and exposes them in Kubernetes apiserver through Metrics API for use by Horizontal Pod Autoscaler and Vertical Pod Autoscaler.

Fluent Bit

Docker Hardened Image

Fluent Bit is an open source data collector for unified logging layer.

kube-rbac-proxy

Docker Hardened Image

a small HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using SubjectAccessReview.

Kyverno CLI

Docker Hardened Image

The Kyverno Command Line Interface (CLI) is designed to validate and test policy behavior to resources prior to adding them to a cluster.

AWS Mountpoint S3 CSI Driver

Docker Hardened Image

The AWS Mountpoint for Amazon S3 CSI driver provides Container Storage Interface (CSI) support for mounting S3 buckets as storage volumes in Kubernetes clusters using Mountpoint for Amazon S3.

SPIFFE SPIRE Server

Docker Hardened Image

Central SPIRE control plane that issues and manages SPIFFE workload identities.

Cilium Clustermesh API Server

Docker Hardened Image

Cilium Clustermesh API Server is a load balancing API for Cilium clusters

SPIFFE SPIRE Agent

Docker Hardened Image

Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.

SapMachine

Docker Hardened Image

SapMachine is SAP's downstream distribution of OpenJDK providing production-ready JDK and JRE builds. This image packages the SapMachine JDK for use in containers with JAVA_HOME set to /opt/java/openjdk and common Java CLI tools available on PATH.

Virt Controller

Docker Hardened Image

Virt Controller manages the lifecycle of virtual machines in KubeVirt

Virt Export Server

Docker Hardened Image

Virt Export Server serves virtual machine volume exports in KubeVirt

Langfuse Worker

Docker Hardened Image

Background job processor for the Langfuse LLM engineering platform, handling evaluations, ingestion, batch exports, and data retention.

Cassandra

Docker Hardened Image

Open source NoSQL distributed database.

GitLab Webservice

Docker Hardened Image

GitLab Webservice runs the Puma application server for the GitLab Rails application, providing web UI and API access.

Grafana Tempo

Docker Hardened Image

Grafana Tempo is an open source, easy-to-use, and high-scale distributed tracing backend.

Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

MediaWiki

Docker Hardened Image

Free and open-source wiki software (the software behind Wikipedia).

Virt Operator

Docker Hardened Image

Virt Operator deploys and manages the KubeVirt virtualization infrastructure in Kubernetes

Ceph (Rook)

Docker Hardened Image

Ceph is a distributed storage system providing object, block, and file storage interfaces. This image contains Ceph daemon binaries for use with the Rook Kubernetes operator for cloud-native storage orchestration.

Scalable datastore for metrics, events, and real-time analytics

Grist

Docker Hardened Image

Grist relational spreadsheet

Kube Webhook Certgen

Docker Hardened Image

Certificate generator and patcher for Kubernetes admission webhooks.