Docker image defining the container. This image must be accessible by the service account specified in the workstation configuration.