Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

C 5
Kafka
Distributed event-streaming platform for high-throughput, durable, replayable publish-subscribe pipelines and stream processing.
v4.3.1204.4 MB
MessagingcriticalApache-2.0
A 2
keda
Kubernetes event-driven autoscaler that scales workloads based on external event sources (queues, streams, metrics). Ships the operator and metrics…
v2.20.280.3 MB
CoordinationstandardApache-2.0
F 7
Keycloak
Open-source identity and access management server providing SSO, user federation, and OAuth2/OIDC and SAML for apps and APIs.
v26.7.2232.3 MB
IdentitystandardApache-2.0
D 9
kgateway
kgateway, the CNCF Gateway API control plane that succeeded Gloo Edge. Watches Gateway, HTTPRoute, GRPCRoute and its own gateway.kgateway.dev policy…
v2.4.385.0 MB2 versions
GatewaystandardApache-2.0
D 7
kgateway-envoy
The kgateway data plane, upstream's envoy-wrapper rebuilt clean-room: the QuenchWorks hardened Wolfi Envoy binary plus kgateway's own envoyinit shim,…
v2.4.359.2 MB2 versions
GatewaystandardApache-2.0
C 5
kong
API gateway and ingress controller on a patched OpenResty, with routing, auth, rate limiting, and a plugin ecosystem. Built from source against…
v3.9.342.4 MB
GatewaystandardApache-2.0
A 1
krakend
Stateless, declarative API gateway that aggregates and transforms backend responses from a single JSON config. Built from the community…
v2.13.1124.6 MB
GatewaystandardApache-2.0
D 2
kratos
Ory Kratos, an identity and user-management server covering registration, login, MFA, account recovery and profile self-service. Headless by design…
v26.2.018.6 MB2 versions
IdentitystandardApache-2.0
A 1
kube-state-metrics
Exposes the state of Kubernetes objects as Prometheus metrics for dashboards and alerts.
v2.20.018.5 MB3 versions
ObservabilitystandardApache-2.0
D 17
kubectl
Hardened kubectl image with the common cluster toolbelt (helm, kustomize, jq, a busybox shell) — the 0-CVE answer to alpine/k8s and bitnami/kubectl…
v1.36.453.5 MB2 versions
CI/CD & registrystandardApache-2.0
A 2
kuma
CNCF service mesh control plane (Envoy-based) for multi-zone and multi-cluster meshes. Ships kuma-cp and kumactl with an embedded GUI, built from…
v2.14.461.4 MB
Coordination & meshstandardApache-2.0
A 6
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
v1.19.1255.9 MB
Security & supply chainstandardApache-2.0