Kubescape CLI

Docker Hardened Image

Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.

k6

Docker Hardened Image

Grafana k6 is a modern load testing tool using Go and JavaScript for performance testing

DataHub Ingestion

Docker Hardened Image

DataHub metadata ingestion CLI for emitting metadata from data sources, BI tools, and data warehouses into DataHub.

Reloader

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

DataHub Actions

Docker Hardened Image

Event-driven framework that reacts to real-time changes in DataHub's metadata graph by polling Kafka topics and invoking pluggable actions (Slack/Teams notifications, doc/tag propagation, executor for UI-triggered ingestion).

Kyverno Readiness Checker

Docker Hardened Image

Kyverno Readiness Checker is a component that checks the readiness of a Kyverno installation

Grafana Image Renderer

Docker Hardened Image

Headless browser service for rendering Grafana panels and dashboards as PNG images and PDF documents using Chromium.

Strimzi Operator for Kafka

Docker Hardened Image

A Kubernetes operator that provides a way to run an Apache Kafka cluster on Kubernetes

LiteLLM

Docker Hardened Image

LiteLLM is a universal LLM API gateway that provides OpenAI-compatible APIs for 100+ LLM providers including Bedrock, Azure, OpenAI, Anthropic, Vertex AI, and more.

elixir

Docker Official Image

Elixir is a dynamic, functional language for building scalable and maintainable applications.

Apache Druid

Docker Hardened Image

Apache Druid is a high performance real-time analytics database designed for workflows where fast queries and ingest really matter.

Perl

Docker Hardened Image

Perl is a high-level, general-purpose, interpreted, dynamic programming language known for its text processing capabilities and extensive CPAN ecosystem.

Prometheus Blackbox Exporter

Docker Hardened Image

Prometheus exporter for probing network endpoints via HTTP, HTTPS, DNS, TCP, ICMP, and gRPC.

LiteLLM Database

Docker Hardened Image

LiteLLM Database is the database-enabled LiteLLM proxy image with Prisma support for persistent PostgreSQL-backed keys, budgets, spend tracking, and gateway configuration.

Cilium DNS Proxy

Docker Hardened Image

Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.

erlang

Docker Official Image

Erlang is a programming language used to build massively scalable systems with high availability.

Vault K8s

Docker Hardened Image

vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.

kube-vip

Docker Hardened Image

Virtual IP and load balancer for Kubernetes

Grist

Docker Hardened Image

Grist relational spreadsheet

OpenCost

Docker Hardened Image

OpenCost is an open source cost monitoring tool for Kubernetes and cloud spend

Karpenter

Docker Hardened Image

karpenter is an efficient node manager for kubernetes clusters

Kubernetes API Server (kube-apiserver)

Docker Hardened Image

Front end for the Kubernetes control plane. kube-apiserver exposes the Kubernetes API over HTTP(S), performs request validation, authentication and authorization, runs admission control, and persists cluster state to an etcd backend.

Harbor Core

Docker Hardened Image

Harbor Core is the main API server component of Harbor, an open source trusted cloud native registry project that stores, signs, and scans content.

grafana/grafana

Grafana Labs

The official Grafana docker container

kapacitor

Docker Official Image

Kapacitor is an open source framework for processing, monitoring, and alerting on time series data.

Dex

Docker Hardened Image

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

Docker

Docker Hardened Image

The Docker CLI is the official command-line interface for Docker. It provides commands to build, run, and manage Docker containers and images.

Grype

Docker Hardened Image

Grype is a vulnerability scanner for container images and filesystems. It provides fast and accurate vulnerability detection with support for multiple package ecosystems and output formats.

Syft

Docker Hardened Image

Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.

Git

Docker Hardened Image

Distributed version control system for tracking changes in source code