logo
docker.io/hashicorp/vault-k8s:1.7.4
linux/amd64 docker.io

该镜像是HashiCorp官方提供的用于在Kubernetes集群中集成和管理Vault的工具镜像,包含Vault与Kubernetes交互所需的组件(如Vault Agent Injector、相关控制器等),支持实现Vault在K8s环境中的ServiceAccount认证、动态秘钥生成、秘钥注入到Pod等功能,帮助用户在容器化环境中安全管理敏感信息与秘钥。

17
浏览次数
84.61MB
镜像大小
源镜像
docker.io/hashicorp/vault-k8s:1.7.4
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4
镜像ID
sha256:3c349d61652e4441eff96fa29577f8e1e3552bc03a85e36f248ab6a4eae70b58
镜像 TAG
1.7.4
镜像大小
84.61MB
平台架构
linux/amd64
镜像源
docker.io
CMD
启动入口
/bin/vault-k8s
工作目录
/
OS/平台
linux/amd64
镜像创建
2026-04-30T11:35:15.32215431Z
同步时间
2026-06-23 15:34
浏览量
17 次
贡献者
⚙️ 环境变量 1
KeyValue
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 0
🏷️ 镜像标签 9
KeyValue
Vault-K8s includes first-class integrations between Vault and Kuberentes. Integrations include the Vault Agent Injector mutating admission webhook. description
Vault Team <vault@hashicorp.com> maintainer
Vault K8s name
MPL-2.0 org.opencontainers.image.licenses
1.7.4 release
dfae27d684f2787af56a965abcd4a790597078d1 revision
The Vault-K8s binary includes first-class integrations between Vault and Kubernetes. summary
HashiCorp vendor
1.7.4 version
🛡️ 镜像安全扫描
alpine 3.23.4 Trivy 2026-06-23 15:34 查看完整报告
20
低危 LOW
16
中危 MEDIUM
25
高危 HIGH
0
严重 CRITICAL
受影响目标 (2)
docker.io/hashicorp/vault-k8s:1.7.4 (alpine 3.23.4) alpine bin/vault-k8s gobinary

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4  docker.io/hashicorp/vault-k8s:1.7.4

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4  docker.io/hashicorp/vault-k8s:1.7.4

Shell快速替换命令

sed -i 's#hashicorp/vault-k8s:1.7.4#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4  docker.io/hashicorp/vault-k8s:1.7.4'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4  docker.io/hashicorp/vault-k8s:1.7.4'

镜像构建历史


# 2026-04-30 19:35:15  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/bin/vault-k8s"]
                        
# 2026-04-30 19:35:15  0.00B 指定运行容器时使用的用户
USER vault
                        
# 2026-04-30 19:35:15  72.34MB 复制新文件或目录到容器中
COPY dist/linux/amd64/vault-k8s /bin/ # buildkit
                        
# 2026-04-30 19:35:15  3.79MB 执行命令并创建新的镜像层
RUN |5 PRODUCT_VERSION=1.7.4 PRODUCT_REVISION=dfae27d684f2787af56a965abcd4a790597078d1 PRODUCT_NAME=vault-k8s TARGETOS=linux TARGETARCH=amd64 /bin/sh -c set -eux &&     apk update &&     apk add --no-cache ca-certificates libcap su-exec iputils &&     apk upgrade --no-cache libcrypto3 # buildkit
                        
# 2026-04-30 19:35:13  3.05KB 执行命令并创建新的镜像层
RUN |5 PRODUCT_VERSION=1.7.4 PRODUCT_REVISION=dfae27d684f2787af56a965abcd4a790597078d1 PRODUCT_NAME=vault-k8s TARGETOS=linux TARGETARCH=amd64 /bin/sh -c addgroup vault &&     adduser -S -G vault vault # buildkit
                        
# 2026-04-30 19:35:13  16.76KB 复制新文件或目录到容器中
COPY LICENSE /usr/share/doc/vault-k8s/LICENSE.txt # buildkit
                        
# 2026-04-30 19:35:13  16.76KB 复制新文件或目录到容器中
COPY LICENSE /licenses/mozilla.txt # buildkit
                        
# 2026-04-30 19:35:13  0.00B 添加元数据标签
LABEL name=Vault K8s maintainer=Vault Team <vault@hashicorp.com> vendor=HashiCorp version=1.7.4 release=1.7.4 revision=dfae27d684f2787af56a965abcd4a790597078d1 org.opencontainers.image.licenses=MPL-2.0 summary=The Vault-K8s binary includes first-class integrations between Vault and Kubernetes. description=Vault-K8s includes first-class integrations between Vault and Kuberentes. Integrations include the Vault Agent Injector mutating admission webhook.
                        
# 2026-04-30 19:35:13  0.00B 定义构建参数
ARG TARGETOS=linux TARGETARCH=amd64
                        
# 2026-04-30 19:35:13  0.00B 定义构建参数
ARG PRODUCT_NAME=vault-k8s
                        
# 2026-04-30 19:35:13  0.00B 定义构建参数
ARG PRODUCT_REVISION=dfae27d684f2787af56a965abcd4a790597078d1
                        
# 2026-04-30 19:35:13  0.00B 定义构建参数
ARG PRODUCT_VERSION=1.7.4
                        
# 2026-04-16 04:01:40  0.00B 设置默认要执行的命令
CMD ["/bin/sh"]
                        
# 2026-04-16 04:01:40  8.45MB 复制文件或目录到容器中
ADD alpine-minirootfs-3.23.4-x86_64.tar.gz / # buildkit
                        
                    

镜像信息

{
    "Id": "sha256:3c349d61652e4441eff96fa29577f8e1e3552bc03a85e36f248ab6a4eae70b58",
    "RepoTags": [
        "hashicorp/vault-k8s:1.7.4",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.4"
    ],
    "RepoDigests": [
        "hashicorp/vault-k8s@sha256:e2ef79b457f50d971851df836f78cf41be454644095d84a7411f93ccf3304c15",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s@sha256:e4c473fab6be1d0fee3442224c887c7eef290c8f8bbc7e6a3d1c38466829af0e"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-04-30T11:35:15.32215431Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "vault",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
        ],
        "Cmd": null,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/",
        "Entrypoint": [
            "/bin/vault-k8s"
        ],
        "OnBuild": null,
        "Labels": {
            "description": "Vault-K8s includes first-class integrations between Vault and Kuberentes. Integrations include the Vault Agent Injector mutating admission webhook.",
            "maintainer": "Vault Team \u003cvault@hashicorp.com\u003e",
            "name": "Vault K8s",
            "org.opencontainers.image.licenses": "MPL-2.0",
            "release": "1.7.4",
            "revision": "dfae27d684f2787af56a965abcd4a790597078d1",
            "summary": "The Vault-K8s binary includes first-class integrations between Vault and Kubernetes.",
            "vendor": "HashiCorp",
            "version": "1.7.4"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 84609582,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/4056e4fb188442da3b197310542e931b4bb0eecfa8a6aa1a0515e2d082ca3790/diff:/var/lib/docker/overlay2/bc9bb675fa5a14a20560fbee7cce7b52ad0f2be9ffe4780bc58bcc7abbad5d03/diff:/var/lib/docker/overlay2/4e70834341d9f4fa741aac1de7df5bee36d2c3928ef98e322950758973fb289b/diff:/var/lib/docker/overlay2/a4604e365a352389d1049b1fef54a60d99caf7f67d5243e42723ead4be5b7d6f/diff:/var/lib/docker/overlay2/9a1ef5a883ef2cbf9a0d960bba5d783f7ecd7d9d3ba8bb8cd5537b33d65a942f/diff",
            "MergedDir": "/var/lib/docker/overlay2/94b35accdfa5a737908ee8803a3a6284f2b54deec5ab44606fd412c392daaeea/merged",
            "UpperDir": "/var/lib/docker/overlay2/94b35accdfa5a737908ee8803a3a6284f2b54deec5ab44606fd412c392daaeea/diff",
            "WorkDir": "/var/lib/docker/overlay2/94b35accdfa5a737908ee8803a3a6284f2b54deec5ab44606fd412c392daaeea/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1",
            "sha256:b89ae3607f1facbc651617cdd1cac45dd387a255bff8b622e39265f3edd69280",
            "sha256:8dd5f40ac44cbe156102bec4d78d46029757389df84db6087ec28b0e60673fde",
            "sha256:57a9f6113d9b278248aa7b77b7ed525a7108f2f7bc5e1f7c6b32838294a478a0",
            "sha256:b45bb9a5a1c34aaad857cfb1831088f7e2a203a6891c6691894e6b2d6bc4d322",
            "sha256:0e4e1cb621f82ad8cf21bb22766af6ac5435141c6d055966e18b5f383ca7a3a9"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-06-23T15:34:26.376636869+08:00"
    }
}

更多版本

docker.io/hashicorp/vault-k8s:1.5.0

linux/amd64 docker.io85.62MB2025-01-24 15:36
430

docker.io/hashicorp/vault-k8s:1.4.1

linux/amd64 docker.io69.71MB2025-05-21 13:40
341

docker.io/hashicorp/vault-k8s:1.7.0

linux/amd64 docker.io87.55MB2025-09-04 10:56
378

docker.io/hashicorp/vault-k8s:1.7.2

linux/amd64 docker.io87.23MB2025-12-24 16:49
269

docker.io/hashicorp/vault-k8s:1.7.3

linux/amd64 docker.io83.53MB2026-04-24 14:41
106

docker.io/hashicorp/vault-k8s:1.7.4

linux/amd64 docker.io84.61MB2026-06-23 15:34
16
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×