logo
docker.io/hashicorp/vault-k8s:1.7.5
linux/amd64 docker.io Steven 贡献

该镜像是HashiCorp官方提供的用于在Kubernetes集群中集成和管理Vault的工具镜像,包含Vault与Kubernetes交互所需的组件(如Vault Agent Injector、相关控制器等),支持实现Vault在K8s环境中的ServiceAccount认证、动态秘钥生成、秘钥注入到Pod等功能,帮助用户在容器化环境中安全管理敏感信息与秘钥。

10
浏览次数
85.40MB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5
源镜像
docker.io/hashicorp/vault-k8s:1.7.5
镜像ID
sha256:8bc04e5451710028608143cad75cfb97282b93d783cfc0a8e9dda2898cb0ef7d
镜像 TAG
1.7.5
镜像大小
85.40MB
平台架构
linux/amd64
镜像源
docker.io
CMD
启动入口
/bin/vault-k8s
工作目录
/
OS/平台
linux/amd64
镜像创建
2026-06-29T14:50:51.25984766Z
同步时间
2026-07-30 10:16
浏览量
10 次
贡献者
avatar Steven
⚙️ 环境变量 1
KeyValue
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 0
🏷️ 镜像标签 9
KeyValue
Vault-K8s includes first-class integrations between Vault and Kuberentes. Integrations include the Vault Agent Injector mutating admission webhook. description
Vault Team <vault@hashicorp.com> maintainer
Vault K8s name
MPL-2.0 org.opencontainers.image.licenses
1.7.5 release
7efae2b937dc412dc34055bee697bcff9a7392b4 revision
The Vault-K8s binary includes first-class integrations between Vault and Kubernetes. summary
HashiCorp vendor
1.7.5 version
🛡️ 镜像安全扫描
alpine 3.24.1 Trivy 2026-07-30 10:16 查看完整报告
0
低危 LOW
1
中危 MEDIUM
2
高危 HIGH
0
严重 CRITICAL
受影响目标 (2)
docker.io/hashicorp/vault-k8s:1.7.5 (alpine 3.24.1) alpine bin/vault-k8s gobinary

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5  docker.io/hashicorp/vault-k8s:1.7.5

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5  docker.io/hashicorp/vault-k8s:1.7.5

Shell快速替换命令

sed -i 's#hashicorp/vault-k8s:1.7.5#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5  docker.io/hashicorp/vault-k8s:1.7.5'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5  docker.io/hashicorp/vault-k8s:1.7.5'

镜像构建历史


# 2026-06-29 22:50:51  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/bin/vault-k8s"]
                        
# 2026-06-29 22:50:51  0.00B 指定运行容器时使用的用户
USER vault
                        
# 2026-06-29 22:50:51  73.10MB 复制新文件或目录到容器中
COPY dist/linux/amd64/vault-k8s /bin/ # buildkit
                        
# 2026-06-29 22:50:51  3.85MB 执行命令并创建新的镜像层
RUN |5 PRODUCT_VERSION=1.7.5 PRODUCT_REVISION=7efae2b937dc412dc34055bee697bcff9a7392b4 PRODUCT_NAME=vault-k8s TARGETOS=linux TARGETARCH=amd64 /bin/sh -c set -eux &&     apk update &&     apk add --no-cache ca-certificates libcap su-exec iputils &&     apk upgrade --no-cache libcrypto3 # buildkit
                        
# 2026-06-29 22:50:50  3.05KB 执行命令并创建新的镜像层
RUN |5 PRODUCT_VERSION=1.7.5 PRODUCT_REVISION=7efae2b937dc412dc34055bee697bcff9a7392b4 PRODUCT_NAME=vault-k8s TARGETOS=linux TARGETARCH=amd64 /bin/sh -c addgroup vault &&     adduser -S -G vault vault # buildkit
                        
# 2026-06-29 22:50:49  16.76KB 复制新文件或目录到容器中
COPY LICENSE /usr/share/doc/vault-k8s/LICENSE.txt # buildkit
                        
# 2026-06-29 22:50:49  16.76KB 复制新文件或目录到容器中
COPY LICENSE /licenses/mozilla.txt # buildkit
                        
# 2026-06-29 22:50:49  0.00B 添加元数据标签
LABEL name=Vault K8s maintainer=Vault Team <vault@hashicorp.com> vendor=HashiCorp version=1.7.5 release=1.7.5 revision=7efae2b937dc412dc34055bee697bcff9a7392b4 org.opencontainers.image.licenses=MPL-2.0 summary=The Vault-K8s binary includes first-class integrations between Vault and Kubernetes. description=Vault-K8s includes first-class integrations between Vault and Kuberentes. Integrations include the Vault Agent Injector mutating admission webhook.
                        
# 2026-06-29 22:50:49  0.00B 定义构建参数
ARG TARGETOS=linux TARGETARCH=amd64
                        
# 2026-06-29 22:50:49  0.00B 定义构建参数
ARG PRODUCT_NAME=vault-k8s
                        
# 2026-06-29 22:50:49  0.00B 定义构建参数
ARG PRODUCT_REVISION=7efae2b937dc412dc34055bee697bcff9a7392b4
                        
# 2026-06-29 22:50:49  0.00B 定义构建参数
ARG PRODUCT_VERSION=1.7.5
                        
# 2026-06-16 08:01:29  0.00B 设置默认要执行的命令
CMD ["/bin/sh"]
                        
# 2026-06-16 08:01:29  8.42MB 复制文件或目录到容器中
ADD alpine-minirootfs-3.24.1-x86_64.tar.gz / # buildkit
                        
                    

镜像信息

{
    "Id": "sha256:8bc04e5451710028608143cad75cfb97282b93d783cfc0a8e9dda2898cb0ef7d",
    "RepoTags": [
        "hashicorp/vault-k8s:1.7.5",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s:1.7.5"
    ],
    "RepoDigests": [
        "hashicorp/vault-k8s@sha256:18501ccd7ebf6907629ea929f8dd8c0c1b78363e866708a95ae1e7edf1730c5d",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/hashicorp/vault-k8s@sha256:c0cd4390fe974041e50daf167cef679ac1d15320bc0467d3ff633384ba4f873b"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-06-29T14:50:51.25984766Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "vault",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
        ],
        "Cmd": null,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/",
        "Entrypoint": [
            "/bin/vault-k8s"
        ],
        "OnBuild": null,
        "Labels": {
            "description": "Vault-K8s includes first-class integrations between Vault and Kuberentes. Integrations include the Vault Agent Injector mutating admission webhook.",
            "maintainer": "Vault Team \u003cvault@hashicorp.com\u003e",
            "name": "Vault K8s",
            "org.opencontainers.image.licenses": "MPL-2.0",
            "release": "1.7.5",
            "revision": "7efae2b937dc412dc34055bee697bcff9a7392b4",
            "summary": "The Vault-K8s binary includes first-class integrations between Vault and Kubernetes.",
            "vendor": "HashiCorp",
            "version": "1.7.5"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 85395504,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/901b1a3b8efa8d6f85f1d42a909947e479f828a10eed3ec4756658875d7d73ba/diff:/var/lib/docker/overlay2/7f1b7805813d2cdda59d60fbbf66100701aed13188989c96ade2893bfd0ab4af/diff:/var/lib/docker/overlay2/ab57e77ace1815ea641d8e24ef414ad424f870415c2fefae51d16377e301b10a/diff:/var/lib/docker/overlay2/aaa8046063a3aaa8d65c2f9703674d6955368ac835f8a021c1378bf0e5d1d73d/diff:/var/lib/docker/overlay2/d51bd9f442769618005c9be653661c047116bf4ebe32b04db2ad4ca7bebb792d/diff",
            "MergedDir": "/var/lib/docker/overlay2/2370a7f8ea0f2d0b7c4968ce307311fb509e90fc409920b1af59745b262b28fc/merged",
            "UpperDir": "/var/lib/docker/overlay2/2370a7f8ea0f2d0b7c4968ce307311fb509e90fc409920b1af59745b262b28fc/diff",
            "WorkDir": "/var/lib/docker/overlay2/2370a7f8ea0f2d0b7c4968ce307311fb509e90fc409920b1af59745b262b28fc/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c",
            "sha256:3b014a690f27f687f2dbd7e7506edd83539c863a080b231e2224d2ae61853add",
            "sha256:615287df64619f3a8f13ed5b71c578def1097d12519c4410ef074b362f19d598",
            "sha256:5ec3e9e0f6cd092452d094e7ddef6c15e7d99fbe0c7bc1a9b11fb0ab46784bf7",
            "sha256:78aed9589ee7ea3b0f2c80329655f8346f481656ddece7784026003f59f660c0",
            "sha256:be9d9a1ca488552205c3387c109fea448114819e1abac9cf804cbf77e4a7f3ad"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-07-30T10:16:05.858904435+08:00"
    }
}

更多版本

docker.io/hashicorp/vault-k8s:1.5.0

linux/amd64 docker.io85.62MB2025-01-24 15:36
453

docker.io/hashicorp/vault-k8s:1.4.1

linux/amd64 docker.io69.71MB2025-05-21 13:40
371

docker.io/hashicorp/vault-k8s:1.7.0

linux/amd64 docker.io87.55MB2025-09-04 10:56
406

docker.io/hashicorp/vault-k8s:1.7.2

linux/amd64 docker.io87.23MB2025-12-24 16:49
303

docker.io/hashicorp/vault-k8s:1.7.3

linux/amd64 docker.io83.53MB2026-04-24 14:41
151

docker.io/hashicorp/vault-k8s:1.7.4

linux/amd64 docker.io84.61MB2026-06-23 15:34
61

docker.io/hashicorp/vault-k8s:1.7.5

linux/amd64 docker.io85.40MB2026-07-30 10:16
9
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×