consul-k8s

Pull Latest Image

Download the container image from the registry

Basic Run

Run the container with basic configuration

docker run -it --name consul-k8s clnstrt-images.clnstrt.dev/$ORGANIZATION/consul-k8s:latest

Production Deployment

Deploy with production security settings

docker run -d --name consul-k8s-prod \
  --read-only \
  --security-opt=no-new-privileges \
  --user 100:100 \
  clnstrt-images.clnstrt.dev/$ORGANIZATION/consul-k8s:latest

Volume Mount

Mount local directory for persistent data

docker run -v $(pwd)/consul-data:/consul/data clnstrt-images.clnstrt.dev/$ORGANIZATION/consul-k8s:latest

Port Forwarding

Run with custom port mappings

docker run -p 8500:8500 -p 8600:8600/udp clnstrt-images.clnstrt.dev/$ORGANIZATION/consul-k8s:latest

Environment Variables

Configuration options available through environment variables

CONSUL_HTTP_ADDR

Consul HTTP API address

http://localhost:8500

CONSUL_DATACENTER

Consul datacenter name

dc1

CONSUL_ALLOW_PRIVILEGED_PORTS

Enable privileged ports access

false

CONSUL_CLIENT_CERT

Client certificate file path

Security Best Practices

Recommended security configurations and practices

• Enable TLS encryption for all communication
• Implement ACL tokens for access control
• Use dedicated service accounts
• Configure proper network policies
• Regular security updates and patches
• Enable audit logging

Kubernetes Security Context

Recommended security context for Kubernetes deployments

securityContext:
  runAsNonRoot: true
  runAsUser: 100
  runAsGroup: 100
  fsGroup: 100
  readOnlyRootFilesystem: true
  allowPrivilegeEscalation: false
  capabilities:
    drop: ["ALL"]