Keycloak Helm chart

Docker Hardened Image

Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.

trust-manager

Docker Hardened Image

cert-manager trust-manager manages trust bundles in Kubernetes and OpenShift clusters

Sealed Secrets Kubeseal

Docker Hardened Image

Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.

Pinniped CLI

Docker Hardened Image

Pinniped CLI is a command-line utility for interacting with Pinniped

hyperledger-fabric-ca

Docker Hardened Image

Certificate Authority for the Hyperledger Fabric blockchain network

kube-mgmt

Docker Hardened Image

Sidecar for managing OPA instances in Kubernetes.

Kyverno Helm chart

Docker Hardened Image

Kyverno is a Kubernetes Native Policy Management engine.

Handshake service for kernel TLS consumers

APISIX Helm chart

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

Trust Manager Package

Docker Hardened Image

A trust manager package image that provides Debian CA certificates for use as an init container with cert-manager trust-manager.

Kyverno Reports Server

Docker Hardened Image

Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.

Kyverno Reports Server Helm chart

Docker Hardened Image

Kyverno reports server provides a scalable solution for storing policy reports and cluster policy reports.

Kong

Docker Hardened Image

Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.

Gatekeeper CRDs

Docker Hardened Image

Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.

Gatekeeper

Docker Hardened Image

Policy Controller for Kubernetes, built on Open Policy Agent.

Connaisseur

Docker Hardened Image

A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

AWS EKS Pod Identity Agent

Docker Hardened Image

The AWS EKS Pod Identity Agent runs on Amazon EKS nodes and exchanges Kubernetes service account tokens for temporary AWS IAM credentials, providing pods with IAM roles without using IRSA or instance profiles.

Azure Key Vault Controller

Docker Hardened Image

Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.