The CleanStart Kyverno-Cli image provides a production-ready, security-hardened container optimized for enterprise environments. Built on a minimal base OS with comprehensive security hardening, this image delivers reliable application execution with advanced security features.
Core capabilities and strengths of this runtime container
Typical scenarios where this runtime container excels
Download the runtime container images
docker pull clnstrt-images.cleanstart.com/$ORGANIZATION/kyverno-cli:latestdocker pull clnstrt-images.cleanstart.com/$ORGANIZATION/kyverno-cli:latest-devStart interactive session for development
docker run -d --name kyverno-cli-prod \\
--read-only \\
--security-opt=no-new-privileges \\
--user 1000:1000 \\
clnstrt-images.cleanstart.com/$ORGANIZATION/kyverno-cli:latestExecute a simple Hello World program
docker run -it --name kyverno-cli-test clnstrt-images.cleanstart.com/$ORGANIZATION/kyverno-cli:latest-devRun container with local workspace mounted
docker run --rm -v $(pwd):/app -w /app clnstrt-images.cleanstart.com/$ORGANIZATION/kyverno-cli:latest-dev python --versionRun application with port forwarding
docker run -d --name kyverno-cli-app \
-p 8000:8000 \
-v $(pwd):/app \
-w /app \
clnstrt-images.cleanstart.com/$ORGANIZATION/kyverno-cli:latestConfiguration options available through environment variables
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/binRecommended security configurations and practices
Recommended security context for Kubernetes deployments
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop: ['ALL']Essential links and resources for further information
Awarded with
Docker verified
Certifications
