Building

Building

Tool	Description
distroless	Language focused docker images, minus the operating system "Distroless" images contain only your application and its runtime dependencies They do not contain package managers, shells or any other programs
Bottlerocket	Linux-based open source operating system designed and optimized specifically for use as a container host
img	Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder
jib	Build container images for your Java applications
makisu	Docker image building tool, works in unprivileged containerized environments like Mesos and Kubernetes
docker-slim	Minifies container images by analysing what is actually used at runtime, and throwing away the rest Not a replacement for scratch builds entirely, but a useful stepping-stone towards them
copilot-cli	Tool to build, release and operate production ready containerized applications on Amazon ECS and AWS Fargate
EC2 Image Builder	Build a golden Windows OS image that follows the STIGs compliance guidelines

Operators

Tool	Description
kopf	A Python framework to write Kubernetes operators
Ansible	A Practical kubernetes Operator using Ansible

Pipeline

Tool	Description
quay	Registry: Build, Store, and Distribute your Applications and Containers
distribution	Basis of the container registry that is part of Docker Hub
reg	Docker registry v2 command line client and repo listing generator with security checks
kraken	P2P Docker registry capable of distributing TBs of data in seconds
tekton	A Kubernetes-native pipeline resource The Tekton Pipelines project provides Kubernetes-style resources for declaring CI/CD-style pipelines
cosign	Container Signing, Verification and Storage in an OCI registry (blog post) Setup a Github Action to build and sign an image cosigned: A Kubernetes admission controller to verify images have been signed by cosign

Utils

Tool	Description
velero	Backup and migrate Kubernetes applications and their persistent volumes
sinker	Syncs container images from one registry to another Useful in cases when you rely on images that exist in a public container registry, but need to pull from a private registry
kube-janitor	Cleans up (deletes) Kubernetes resources after a configured TTL
kube-resource-report	Report Kubernetes cluster and pod resource requests vs usage and generate static HTML
aws-container-images-toolkit	A collection of tools to statically and dynamically identify public container images that are hosted on Docker Hub
k8s-image-swapper	Mirror images into your own registry and swap image references automatically
outdated	Kubectl plugin to find and report outdated images running in a Kubernetes cluster
crane	crane is a tool for interacting with remote images and registries