Hardened container images grouped by relationship

Images grouped under the products and stacks that use them. Shared dependencies appear in every group that uses them.

Relationships

GitOps and delivery

Argo CD and the Dex, Redis, and HAProxy images it uses.

GitOps and delivery
GitOps and deliveryArgo CDDexSSO providerRedisHA cacheHAProxyHA cache loadbalancer

Arrow styles

  • SSO provider
  • HA cache
  • HA cache load balancer
  • Argo CD uses Dex as SSO provider
  • Argo CD uses Redis as HA cache
  • Argo CD uses HAProxy as HA cache load balancer

Ingress and gateway

Traefik and Envoy reverse proxies.

Ingress and gateway
Ingress and gatewayTraefikIngress proxyEnvoyGateway proxycert-managerCertificatemanager

Arrow styles

  • tls
  • Traefik uses cert-manager as tls
  • Envoy uses cert-manager as tls

Certificates

The cert-manager family for in-cluster TLS.

Certificates
Certificatescert-managerCertificatemanagercert-managerwebhookAdmissionwebhookcert-managercainjectorCA bundleinjectorcert-manageracmesolverACME HTTP-01solvercert-managerstartupapiche…Startup APIcheck

Arrow styles

  • admission
  • ca-bundle
  • api
  • cert-manager uses cert-manager webhook as admission
  • cert-manager uses cert-manager cainjector as ca-bundle
  • cert-manager webhook uses cert-manager cainjector as ca-bundle
  • cert-manager startupapicheck uses cert-manager as api
  • cert-manager startupapicheck uses cert-manager webhook as admission

Secrets

External Secrets Operator.

Observability

Blackbox Exporter. The rest of this family is added as each image is published.

Observability
ObservabilityBlackboxExporterEndpoint probeOpenTelemetryCollectorTelemetrypipelineGrafanaDashboardsAlloyLog shippingNode ExporterHost metricsPrometheusMetricscollectionAlertmanagerAlert routingKube StateMetricsCluster metricsRedis ExporterRedis metricsLokiLog storage

Arrow styles

  • alerts
  • node
  • kube-state
  • probe
  • redis
  • metrics
  • logs
  • Prometheus uses Alertmanager as alerts
  • Prometheus uses Node Exporter as node
  • Prometheus uses Kube State Metrics as kube-state
  • Prometheus uses Blackbox Exporter as probe
  • Prometheus uses Redis Exporter as redis
  • Grafana uses Prometheus as metrics
  • Grafana uses Loki as logs
  • Alloy uses Loki as logs