Images

18 images

Coordination & mesh images

Hardened container images in the coordination & mesh category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
cilium
The Cilium agent (cilium-agent, cilium-dbg, cilium-health, hubble, the BPF sources, CNI loopback and upstream's init scripts) built from the…
image v1.18.14, 1.20.2, 1.19.8
التنسيق والشبكةstandardApache-2.0
0 CVE
cilium-operator
The Cilium Operator, generic variant (cluster-pool IPAM, CRD registration, identity and endpoint garbage collection) for a Cilium install run with…
image v1.18.14, 1.20.2, 1.19.8
التنسيق والشبكةstandardApache-2.0
0 CVE
external-dns
Synchronizes Kubernetes Services and Ingresses with DNS providers so records are managed automatically.
image v0.23.0
التنسيق والشبكةstandardApache-2.0
0 CVE
frr
FRRouting, the routing protocol suite (BGP, OSPF, IS-IS, BFD, PIM), from Wolfi's frr package. Runs as root like upstream's image, with upstream's…
image v10.6.1
التنسيق والشبكةstandardGPL-2.0
0 CVE
headscale
Open-source, self-hosted implementation of the Tailscale control server for coordinating a WireGuard mesh. Single static Go binary on a hardened…
image v0.29.4
التنسيق والشبكةstandardBSD-3-Clause
0 CVE
hubble-relay
Hubble Relay, Cilium's cluster-wide aggregator of Hubble network-flow observability (one Observer API across every node). Built from the…
image v1.18.14, 1.19.8, 1.20.2
التنسيق والشبكةstandardApache-2.0
0 CVE
hubble-ui
Hubble UI, Cilium's web UI for the service map and live network flows. The React frontend built from source and served by a Wolfi nginx that proxies…
image v0.13.6
التنسيق والشبكةstandardApache-2.0
0 CVE
hubble-ui-backend
The Hubble UI backend, the Go service that reads flows and the service map from Hubble Relay and streams them to the Hubble UI. Built from source.…
image v0.13.6
التنسيق والشبكةstandardApache-2.0
0 CVE
istio-proxyv2
Istio's sidecar and gateway data plane. pilot-agent built from the istio/istio source, paired with Istio's own Envoy (the Wolfi istio-envoy build at…
image v1.31.1
التنسيق والشبكةstandardApache-2.0
0 CVE
istiod
Istio's control plane binary (pilot-discovery) -- Pilot/xDS discovery, the sidecar-injecting webhook, and the mesh CA -- built from source on Wolfi.…
image v1.30.5, 1.31.1, 1.29.8
التنسيق والشبكةstandardApache-2.0
0 CVE
kube-vip
kube-vip, virtual IPs and load balancing for the Kubernetes control plane and for Services of type LoadBalancer, by ARP or BGP. Built from the…
image v1.2.4, 1.0.4, 1.1.2
التنسيق والشبكةstandardApache-2.0
0 CVE
kuma
CNCF service mesh control plane (Envoy-based) for multi-zone and multi-cluster meshes. Ships kuma-cp and kumactl with an embedded GUI, built from…
image v2.14.5
التنسيق والشبكةstandardApache-2.0