The Runtime Enforcer Debugger is a CLI troubleshooting tool that inspects node agents, streams eBPF telemetry, and verifies cluster policy application.

Runtime Enforcer Debugger

runtime-enforcer-debugger:0.8.0-3.5

The Runtime Enforcer Controller is a cluster-wide operator that watches security CRDs and syncs rules to node agents for real-time policy enforcement.

Runtime Enforcer Controller

runtime-enforcer-controller:0.8.0-3.5

Kubewarden Controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. The Kubewarden Controller reconciles the admission policies you have registered with the Kubernetes webhooks of the cluster where it's deployed.

Kubewarden Controller

kubewarden-controller:1.37.2-12.8

K3k Kubelet creates a node that registers itself in the virtual cluster. When workloads are scheduled to this node, it simply creates/updates the workload on the host cluster.

K3k Kubelet

k3k-kubelet:1.1.0-4.4

The Kubewarden Audit Scanner inspects the resources defined in the cluster and identifies the ones that are violating Kubewarden policies. The results of the scan are stored in PolicyReport and ClusterPolicyReports custom resources. Each resource has its own dedicated PolicyReport or ClusterPolicyReport, depending on the type of the resource.

Kubewarden Audit Scanner

kubewarden-audit-scanner:1.37.2-12.8

K3k, Kubernetes in Kubernetes, is a tool that empowers you to create and manage isolated K3s clusters within your existing Kubernetes environment. It enables efficient multi-tenancy, streamlined experimentation, and robust resource isolation, minimizing infrastructure costs by allowing you to run multiple lightweight Kubernetes clusters on the same physical host.

k3k:1.0.3-11.4

k3k:1.1.0-4.4

k3k-kubelet:1.0.3-11.4

The Runtime Enforcer Agent is a daemon using eBPF to monitor kernel events, evaluate active security policies, and block unauthorized processes.

Runtime Enforcer Agent

runtime-enforcer-agent:0.8.0-3.5

Kubewarden Policy Server is a Kubernetes dynamic admission controller that uses Kubewarden Policies to validate admission requests. Kubewarden Policies are simple WebAssembly modules.

Kubewarden Policy Server

kubewarden-policy-server:1.37.2-12.8

Longhorn Instance Manager manages engine and replica instances on the node.

Longhorn Instance Manager

longhorn-instance-manager:1.11.3-6.27

Longhorn Backing Image Managers handles creating, synchronizing and deleting backing images stored on a single Longhorn disk.

Longhorn Backing Image Manager

longhorn-backing-image-manager:1.11.3-6.14

Longhorn Share Manager manages nfs exports for rwx volumes.

Longhorn Share Manager

longhorn-share-manager:1.11.3-6.10

longhorn-instance-manager:1.10.4-9.28

longhorn-instance-manager:1.9.6-14.28

The Apache Tomcat® software is an open source implementation of the Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Annotations and Jakarta Authentication specifications. These specifications are part of the Jakarta EE platform.

Name	Version	Revision	Registered	Digest	Size	Arch
runtime-enforcer-debugger	0.8.0	3.5	28 minutes ago	3574304	25.5 MB	x86_64
runtime-enforcer-debugger	0.8.0	3.5	28 minutes ago	fe6a9b9	23.1 MB	aarch64
runtime-enforcer-controller	0.8.0	3.5	28 minutes ago	a03c46c	30.1 MB	x86_64
runtime-enforcer-controller	0.8.0	3.5	28 minutes ago	cc543e1	27.3 MB	aarch64
kubewarden-controller	1.37.2	12.8	28 minutes ago	ff15d4c	29.4 MB	x86_64
kubewarden-controller	1.37.2	12.8	28 minutes ago	d541e28	26.6 MB	aarch64
k3k-kubelet	1.1.0	4.4	28 minutes ago	3919f9c	32.9 MB	x86_64
k3k-kubelet	1.1.0	4.4	28 minutes ago	3695782	29.8 MB	aarch64
kubewarden-audit-scanner	1.37.2	12.8	28 minutes ago	2084476	23 MB	x86_64
kubewarden-audit-scanner	1.37.2	12.8	28 minutes ago	850fefa	20.9 MB	aarch64
k3k	1.0.3	11.4	28 minutes ago	f64b1f0	44.5 MB	x86_64
k3k	1.0.3	11.4	28 minutes ago	0fd3b55	40.1 MB	aarch64
k3k	1.1.0	4.4	28 minutes ago	e0473ce	43.5 MB	x86_64
k3k	1.1.0	4.4	28 minutes ago	6b68ec7	39.1 MB	aarch64
k3k-kubelet	1.0.3	11.4	28 minutes ago	1c20071	33 MB	x86_64
k3k-kubelet	1.0.3	11.4	28 minutes ago	dbaa88f	30 MB	aarch64
runtime-enforcer-agent	0.8.0	3.5	28 minutes ago	48ca25e	27.9 MB	x86_64
runtime-enforcer-agent	0.8.0	3.5	28 minutes ago	c30bc05	25.3 MB	aarch64
kubewarden-policy-server	1.37.2	12.8	28 minutes ago	7e29e2d	34.5 MB	x86_64
kubewarden-policy-server	1.37.2	12.8	28 minutes ago	0b24590	33.8 MB	aarch64
longhorn-instance-manager	1.11.3	6.27	2 hours ago	8750223	212.9 MB	x86_64
longhorn-instance-manager	1.11.3	6.27	2 hours ago	3ed6b6e	206 MB	aarch64
longhorn-backing-image-manager	1.11.3	6.14	2 hours ago	ac418ab	103.9 MB	x86_64
longhorn-backing-image-manager	1.11.3	6.14	2 hours ago	1d0a9cd	104.6 MB	aarch64
longhorn-share-manager	1.11.3	6.10	2 hours ago	e38b9d8	63.9 MB	x86_64
longhorn-share-manager	1.11.3	6.10	2 hours ago	d914237	63.2 MB	aarch64
longhorn-instance-manager	1.10.4	9.28	2 hours ago	03bfa6f	212.6 MB	x86_64
longhorn-instance-manager	1.10.4	9.28	2 hours ago	b10f387	205.7 MB	aarch64
longhorn-instance-manager	1.9.6	14.28	2 hours ago	f532851	210.5 MB	x86_64
longhorn-instance-manager	1.9.6	14.28	2 hours ago	c00bfe3	203.4 MB	aarch64
apache-tomcat	9.0.121-openjdk8	16.22	3 hours ago	8cb7cb7	79.2 MB	x86_64
apache-tomcat	9.0.121-openjdk25	16.22	3 hours ago	7264cbe	114.2 MB	x86_64
apache-tomcat	9.0.121-openjdk21	16.22	3 hours ago	54f04f7	99.1 MB	x86_64
apache-tomcat	9.0.121-openjdk17	16.22	3 hours ago	071d0bb	93.9 MB	x86_64
apache-tomcat	9.0.121-openjdk11	16.22	3 hours ago	0a263d8	88.6 MB	x86_64
apache-tomcat	9.0.121-openjdk8	16.22	3 hours ago	24184ab	77.7 MB	aarch64
apache-tomcat	9.0.121-openjdk25	16.22	3 hours ago	58bae90	112.6 MB	aarch64
apache-tomcat	9.0.121-openjdk21	16.22	3 hours ago	1a64a31	97 MB	aarch64
apache-tomcat	9.0.121-openjdk17	16.22	3 hours ago	d4330be	92 MB	aarch64
apache-tomcat	9.0.121-openjdk11	16.22	3 hours ago	a27c34e	86.6 MB	aarch64