wait-for-it

Docker Hardened Image

A pure bash script to test and wait on the availability of a TCP host and port. Useful for synchronizing the spin-up of interdependent services in Docker Compose.

SPIFFE Helper

Docker Hardened Image

Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.

Apache Superset

Docker Hardened Image

Apache Superset is a modern data exploration and visualization platform.

Stargate

Docker Hardened Image

Stargate is an open-source data API gateway that exposes Cassandra and DataStax Enterprise databases via REST, GraphQL, gRPC, and Document APIs.

Cass Config Builder

Docker Hardened Image

Configuration templating engine for Apache Cassandra, used by the DataStax Kubernetes Operator.

ClickHouse Keeper

Docker Hardened Image

ClickHouse Keeper is a ZooKeeper-compatible coordination service for ClickHouse cluster replication and distributed DDL.

Istio Egress Helm chart

Docker Hardened Image

Helm chart for deploying Istio gateways.

Istio Ingress Helm chart

Docker Hardened Image

Helm chart for deploying Istio gateways.

Varnish Cache

Docker Hardened Image

Varnish Cache is a high-performance HTTP accelerator and caching reverse proxy designed to speed up web applications by caching content in memory and serving it at very high throughput.

OpenCost UI

Docker Hardened Image

Web-based UI for OpenCost Kubernetes cost monitoring

Source Watcher

Docker Hardened Image

Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.

Calico CTL

Docker Hardened Image

Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.

ShellCheck

Docker Hardened Image

ShellCheck is a shell script static analysis tool that gives warnings and suggestions for bash/sh shell scripts to point out and clarify syntax issues, semantic problems and subtle caveats, corner cases and pitfalls

Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

Grafana Tempo Helm chart

Docker Hardened Image

High-volume, cost-effective distributed tracing backend that stores traces directly in object storage.

Trigger.dev

Docker Hardened Image

Self-hosted Trigger.dev webapp: an open-source background jobs and AI workflow platform for TypeScript, running on Postgres with optional Redis and ClickHouse.

GitLab Runner Helper

Docker Hardened Image

GitLab Runner Helper handles git operations, artifact upload/download, and cache management for GitLab CI/CD jobs.

Trivy Operator Helm chart

Docker Hardened Image

Kubernetes-native security toolkit that leverages Trivy to continuously scan your Kubernetes cluster for security issues.

OpenCost Helm chart

Docker Hardened Image

OpenCost is a Kubernetes-native cost monitoring and allocation tool.

Zot Helm chart

Docker Hardened Image

Zot is a production-ready, vendor-neutral OCI image registry with full OCI standards compliance and scalability.

OpenTelemetry Operator Helm chart

Docker Hardened Image

Kubernetes operator for managing OpenTelemetry Collectors and auto-instrumentation

Open Cluster Management Registration

Docker Hardened Image

Registration controller and agent for Open Cluster Management hub and spoke cluster lifecycle.