OpenShift Container Platform Image Signing - Integration Guide

Red Hat® OpenShift® is a CNCF certified Kubernetes platform and distribution solution. Red Hat OpenShift offers a consistent hybrid cloud foundation for building and scaling containerized applications. Luna HSMs enable you to store the cryptographic keys used for signing the container images deployed in OpenShift. With container image signing you can validate the integrity of container image and where it came from. Following are some of the benefits of using Luna HSMs along with OpenShift container-based applications:

• Secure generation, storage, and protection of cryptographic keys on FIPS 140-2 level 3 validated hardware.
• Full life cycle management of keys.
• HSM audit trail.