cloudflared

Docker Hardened Image

Cloudflare Tunnel client that connects origin services to the Cloudflare network without opening inbound ports.

Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped

SendGrid Python

Docker Hardened Image

The official Twilio SendGrid Python client library for the SendGrid Web API v3, preinstalled on a hardened Python runtime.

Amazon EKS Pod Identity Webhook

Docker Hardened Image

The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.

Flux Operator

Docker Hardened Image

Kubernetes operator that manages the lifecycle of Flux CD, providing declarative install, upgrade, and configuration of the GitOps toolkit along with a web UI for monitoring the delivery pipelines.

Forklift OpenStack Populator

Docker Hardened Image

Forklift OpenStack Populator streams a Glance image from an OpenStack source cloud into a Kubernetes PersistentVolumeClaim during a Forklift migration.

Ory Oathkeeper Maester

Docker Hardened Image

Kubernetes controller that watches Ory Oathkeeper Rule custom resources and renders them into the access rules ConfigMap or file that Ory Oathkeeper consumes.

Tailscale Kubernetes Operator

Docker Hardened Image

Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.

Forklift Console Plugin

Docker Hardened Image

OpenShift console dynamic plugin for Forklift, the Migration Toolkit for Virtualization. Adds the migration UI (providers, plans, network and storage mappings) for moving virtual machines from VMware vSphere, oVirt, OpenStack, and OVA to KubeVirt.

Milvus etcd

Docker Hardened Image

Bitnami-compatible etcd distribution maintained by the Milvus project as the metadata store for Milvus deployments

Selenium Node Chromium

Docker Hardened Image

Selenium Grid worker node running Chromium with chromedriver, the arm64-capable browser node for Selenium Grid 4.x. Registers with a Selenium Hub and serves WebDriver sessions backed by the open-source Chromium browser.

GitHub MCP Server

Docker Hardened Image

GitHub's official MCP Server connects AI tools directly to GitHub's platform. This gives AI agents, assistants, and chatbots the ability to read repositories and code files, manage issues and PRs, analyze code, and automate workflows.

Forklift vSphere Copy Offload Populator

Docker Hardened Image

Forklift vSphere Copy Offload Populator clones VMware source disks directly on storage arrays through vSphere XCOPY, populating Kubernetes PersistentVolumeClaims without host data paths.

R

Docker Hardened Image

R is a free software environment for statistical computing and graphics.

Drupal Nginx

Docker Hardened Image

Nginx web server preconfigured with the wodby virtual host presets for Drupal, plus WordPress, Laravel, Django, Matomo, and plain PHP.

Azure ResourceManager Exporter

Docker Hardened Image

Prometheus exporter for Azure Resource Manager quotas, costs, resource health, IAM, and Defender security metrics.

Spilo

Docker Hardened Image

HA PostgreSQL appliance with Patroni, a multi-major PostgreSQL bundle, and WAL-G backups.

JupyterHub K8s Image Awaiter

Docker Hardened Image

A minimal init container image for JupyterHub that waits for images to be pre-pulled on Kubernetes nodes.

Jaeger ES Index Cleaner

Docker Hardened Image

Jaeger es-index-cleaner deletes Jaeger indices older than a given number of days from Elasticsearch.

NGINX LDAP Auth

Docker Hardened Image

LDAP authentication daemon for the NGINX auth_request module, supporting OpenLDAP and Active Directory.

NVIDIA GPU Operator

Docker Hardened Image

The NVIDIA GPU Operator automates the management of the NVIDIA software components needed to provision GPUs in Kubernetes clusters. This image ships the operator controller, the nvidia-validator, the vectorAdd CUDA validation sample, and kubectl, together with the operand manifests the controller renders at runtime and the operator CRDs.

OpenTelemetry Java Autoinstrumentation

Docker Hardened Image

This is a Java autoinstrumentation agent used by the OpenTelemetry Operator

AWS Provider for Secrets Store CSI Driver

Docker Hardened Image

The AWS provider for the Secrets Store CSI Driver fetches secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store and mounts them into Kubernetes pods as files, supporting both IRSA and EKS Pod Identity authentication.

Tensorflow Serving

Docker Hardened Image

A flexible, high-performance serving system for machine learning models designed for production environments

Envoy Contrib

Docker Hardened Image

Envoy built with the contrib extensions, adding protocol filters such as Postgres, MySQL, Kafka, SIP, and RocketMQ on top of the core high-performance L7 proxy.

Grafana MCP Server

Docker Hardened Image

A Model Context Protocol server for Grafana that provides AI agents with access to Grafana dashboards, datasources, alerting, incidents, and observability features. Enables LLMs to query metrics, logs, traces, and manage Grafana resources.

wait-for-it

Docker Hardened Image

A pure bash script to test and wait on the availability of a TCP host and port. Useful for synchronizing the spin-up of interdependent services in Docker Compose.

Codecov Frontend

Docker Hardened Image

Codecov Frontend is the single-page web application of a self-hosted Codecov deployment, served by nginx in front of the Codecov API.

Jaeger ES Rollover

Docker Hardened Image

Jaeger es-rollover initializes, rolls over and trims the aliased Jaeger indices in an Elasticsearch cluster.

Zscaler MCP Server

Docker Hardened Image

A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the Zscaler Zero Trust Exchange platform.