SpiceDB

Docker Hardened Image

An open source, Google Zanzibar-inspired database for fine-grained authorization.

Kyverno Policy Reporter

Docker Hardened Image

The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord

Envoy Rate Limit Service

Docker Hardened Image

Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.

AWS Private CA Issuer

Docker Hardened Image

AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.

Sealed Secrets Controller

Docker Hardened Image

Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.

Calico CSI

Docker Hardened Image

Calico CSI driver for secure connections from Kubernetes pods to local daemons.

Calico Whisker

Docker Hardened Image

Calico Whisker provides a web UI to view network flows in Kubernetes clusters.

Gatekeeper CRDs

Docker Hardened Image

Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.

OpenBao

Docker Hardened Image

OpenBao provides a solution to manage, store, and distribute sensitive data, including secrets, certificates, and keys

Calico API Server

Docker Hardened Image

Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.

docker/ucp-auth

Docker, Inc.

Please refer to the docker/ucp image for more information

Calico Typha

Docker Hardened Image

Calico fan-out proxy that scales access to the Calico datastore for large clusters.

Connaisseur

Docker Hardened Image

A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network

Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.

Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.

Kyverno Reports Server

Docker Hardened Image

Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.

ChartMuseum

Docker Hardened Image

An open-source Helm Chart Repository server with support for cloud and local storage backends.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

Cert Exporter

Docker Hardened Image

A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets

Ory Oathkeeper

Docker Hardened Image

Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.

netdata/netdata

Netdata

The official image for monitoring systems, containers and applications with Netdata.

Trust Manager Package

Docker Hardened Image

A trust manager package image that provides Debian CA certificates for use as an init container with cert-manager trust-manager.

SPIFFE Helper

Docker Hardened Image

Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.

Calico Whisker Backend

Docker Hardened Image

Backend API service for the Calico Whisker network flow visualization UI.

Authelia

Docker Hardened Image

Open-source authentication and authorization server with a login portal, single sign-on, and multi-factor authentication.

cimg/ruby

CircleCI

The CircleCI Ruby Docker Convenience Image.

Calico Node Driver Registrar

Docker Hardened Image

CSI node driver registrar repackaged by Calico to register the Calico CSI driver with the kubelet.