GitLab Shell

Docker Hardened Image

GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.

Open Cluster Management Addon Manager

Docker Hardened Image

Runs on the hub cluster and configures the installation of addon agents for each managed cluster.

Actions Runner Controller

Docker Hardened Image

Kubernetes controller that orchestrates ephemeral self-hosted GitHub Actions runners using autoscaling runner scale sets.

Placement

Docker Hardened Image

A Kubernetes controller that makes placement decisions for workloads across managed clusters based on Placement APIs.

GitLab Workhorse

Docker Hardened Image

GitLab Workhorse is the smart reverse proxy that sits in front of GitLab, handling resource-intensive HTTP requests such as file uploads and downloads, Git operations, and archive downloads.

Apache Spark Kubernetes Operator

Docker Hardened Image

Kubernetes operator for managing Apache Spark applications and clusters on Kubernetes

Cluster API Controller

Docker Hardened Image

Core controller manager of Cluster API, the Kubernetes sub-project for declarative, Kubernetes-style APIs to provision, upgrade, and operate clusters across infrastructure providers.

Forklift Operator Index

Docker Hardened Image

OLM File-Based Catalog index image serving the Forklift (Migration Toolkit for Virtualization) operator catalog.

GitLab Container Registry

Docker Hardened Image

The GitLab Container Registry is an OCI/Docker registry server with a relational metadata database and online garbage collection. It stores, manages, and distributes container images and OCI artifacts.

Kubernetes Cluster Autoscaler Helm Chart

Docker Hardened Image

Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster.

Open Cluster Management Registration

Docker Hardened Image

Registration controller and agent for Open Cluster Management hub and spoke cluster lifecycle.

Crossplane Helm chart

Docker Hardened Image

Crossplane is an open source Kubernetes add-on that enables platform teams to assemble infrastructure from multiple vendors and expose higher level self-service APIs.

Forklift Controller

Docker Hardened Image

Forklift Controller orchestrates migrations of virtual machines from VMware, oVirt, OpenStack, OVA, and Hyper-V to KubeVirt.

Forklift Operator

Docker Hardened Image

Forklift Operator deploys and manages the Forklift toolkit for migrating virtual machines from VMware, oVirt, OpenStack, Hyper-V, EC2, and OVA sources to KubeVirt.

Forklift virt-v2v

Docker Hardened Image

Forklift virt-v2v converts VM guest disks for migration to KubeVirt, wrapping libguestfs's virt-v2v tool

Forklift API

Docker Hardened Image

Forklift API is the API server component of the Forklift VM migration toolkit. It serves the mutating and validating admission webhooks for Forklift custom resources and the auxiliary HTTP services the Forklift controller calls during migrations to KubeVirt.

Forklift OVA Provider Server

Docker Hardened Image

Forklift OVA Provider Server inventories OVA appliances on an NFS share and serves virtual machine, network, and disk metadata to the Forklift controller.

Elastic Cloud on Kubernetes (ECK) Operator

Docker Hardened Image

Kubernetes operator for managing Elasticsearch, Kibana, APM Server, and other Elastic Stack applications

Atlantis

Docker Hardened Image

Atlantis is a self-hosted application for automating Terraform pull request workflows.

Forklift OVA Proxy

Docker Hardened Image

Forklift OVA Proxy fronts the OVA provider inventory service, reverse proxying appliance requests from the Forklift console to the provider server inside the cluster.

Forklift Hyper-V Provider Server

Docker Hardened Image

Forklift Hyper-V Provider Server validates exported Hyper-V disk paths on an SMB share for Forklift migration plans.

Forklift Must-Gather

Docker Hardened Image

Forklift must-gather is the diagnostics collector for the Forklift VM migration toolkit. It gathers Forklift and KubeVirt custom resources, pod logs, and optional metrics into a support archive via oc adm must-gather.

GitHub Actions Runner

Docker Hardened Image

Self-hosted runner that listens for and executes GitHub Actions workflow jobs.

Amazon EKS Pod Identity Webhook

Docker Hardened Image

The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.

Flux Operator

Docker Hardened Image

Kubernetes operator that manages the lifecycle of Flux CD, providing declarative install, upgrade, and configuration of the GitOps toolkit along with a web UI for monitoring the delivery pipelines.

Forklift Console Plugin

Docker Hardened Image

OpenShift console dynamic plugin for Forklift, the Migration Toolkit for Virtualization. Adds the migration UI (providers, plans, network and storage mappings) for moving virtual machines from VMware vSphere, oVirt, OpenStack, and OVA to KubeVirt.

Forklift CLI Download

Docker Hardened Image

Forklift CLI Download serves the kubectl-mtv command line client binaries for Linux, macOS, and Windows over TLS for the OpenShift console CLI download page.

Rundeck

Docker Hardened Image

Rundeck is a runbook automation and self-service operations platform for defining jobs and running commands or scripts across nodes over SSH, on schedules or on demand, with access control, logging, and audit.

Sorry Cypress Director

Docker Hardened Image

Sorry Cypress director, the service that coordinates parallel Cypress test runs.

KubeRay Operator

Docker Hardened Image

A Kubernetes operator for deploying and managing Ray clusters, jobs, and services.