Karma is an alert dashboard for Prometheus Alertmanager that aggregates alerts from multiple Alertmanager instances, deduplicates and groups them, and provides silence management.

Hyperledger Fabric Orderer

Docker Hardened Image

Orderer service that runs as part Hyperledger Fabric networks and provides an atomic broadcast ordering service for consumption by the peers

httpbin

Docker Hardened Image

A simple HTTP request and response service for testing HTTP clients, libraries, and proxies.

Forklift API

Docker Hardened Image

Forklift API is the API server component of the Forklift VM migration toolkit. It serves the mutating and validating admission webhooks for Forklift custom resources and the auxiliary HTTP services the Forklift controller calls during migrations to KubeVirt.

Yet Another CloudWatch Exporter (YACE)

Docker Hardened Image

YACE is a Prometheus exporter for AWS CloudWatch that auto-discovers resources through AWS tags and exposes their metrics with AWS tags as labels.

Forklift OVA Provider Server

Docker Hardened Image

Forklift OVA Provider Server inventories OVA appliances on an NFS share and serves virtual machine, network, and disk metadata to the Forklift controller.

Forklift oVirt Populator

Docker Hardened Image

Forklift oVirt Populator downloads a disk from an oVirt engine into a Kubernetes PersistentVolumeClaim during a Forklift migration, bundling the ovirt-img client and the QEMU disk tools it runs.

Klipper Service Load Balancer

Docker Hardened Image

Service load balancer implementation for K3s that exposes services of type LoadBalancer using host ports, enabling simple load balancing for Kubernetes workloads without requiring an external cloud provider.

Atlantis

Docker Hardened Image

Atlantis is a self-hosted application for automating Terraform pull request workflows.

Forklift OVA Proxy

Docker Hardened Image

Forklift OVA Proxy fronts the OVA provider inventory service, reverse proxying appliance requests from the Forklift console to the provider server inside the cluster.

k6-operator

Docker Hardened Image

An operator for running distributed k6 tests.

Datadog Cluster Agent

Docker Hardened Image

Datadog Cluster Agent runs centralized Kubernetes cluster-level checks, serves a custom-metrics provider for HPA, and acts as a proxy between node agents and the Kubernetes API.

CSI-Addons Sidecar

Docker Hardened Image

csi-addons-k8s-sidecar is the Kubernetes CSI-Addons sidecar that runs alongside a CSI driver to expose advanced storage operations such as reclaim space, network fence, encryption key rotation and volume replication to the CSI-Addons controller.

KServe LocalModelNode Agent

Docker Hardened Image

Enables local model node management and caching.

MongoDB MCP Server

Docker Hardened Image

A Model Context Protocol server for MongoDB that enables querying and schema discovery via MCP.

Centrifugo

Docker Hardened Image

Centrifugo is a scalable real-time messaging server that adds WebSocket, SSE, and HTTP-streaming pub/sub to any application backend.

Jaeger

Docker Hardened Image

A minimal Jaeger v2 all-in-one distributed tracing image

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

Calico Pod2Daemon FlexVol

Docker Hardened Image

Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.

Forklift Hyper-V Provider Server

Docker Hardened Image

Forklift Hyper-V Provider Server validates exported Hyper-V disk paths on an SMB share for Forklift migration plans.

cloudflared

Docker Hardened Image

Cloudflare Tunnel client that connects origin services to the Cloudflare network without opening inbound ports.

Forklift Must-Gather

Docker Hardened Image

Forklift must-gather is the diagnostics collector for the Forklift VM migration toolkit. It gathers Forklift and KubeVirt custom resources, pod logs, and optional metrics into a support archive via oc adm must-gather.

KServe LocalModel Controller

Docker Hardened Image

Enables local model caching and management.

SendGrid Python

Docker Hardened Image

The official Twilio SendGrid Python client library for the SendGrid Web API v3, preinstalled on a hardened Python runtime.

Beat Exporter

Docker Hardened Image

Prometheus exporter for Elastic Beats stats endpoints.

Teleport

Docker Hardened Image

Teleport is an identity-aware access platform that provides SSO, short-lived certificates, MFA and session recording for SSH, Kubernetes, databases, web apps and Windows desktops.

GitHub Actions Runner

Docker Hardened Image

Self-hosted runner that listens for and executes GitHub Actions workflow jobs.

Amazon EKS Pod Identity Webhook

Docker Hardened Image

The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.

StackHawk MCP Server

Docker Hardened Image

A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the StackHawk application security testing platform.

Upstash Context7 MCP Server

Docker Hardened Image

A Model Context Protocol server from Upstash that exposes Context7 tools over MCP.