[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":-5,"_10":11,"_12":13},"actionData","errors","root",{"_270":-7,"_271":272,"_273":274},"routes/_app",{"_177":178,"_179":180,"_181":182,"_183":-5,"_184":17,"_185":15,"_186":-5},"routes/_app.gallery","routes/_app.gallery.images.$imageName",{"_113":114,"_115":-7,"_116":117,"_118":-7,"_119":120},"routes/_app.gallery.images.$imageName.compliance",{"_14":15,"_16":17,"_18":15,"_19":20,"_21":22,"_23":24,"_25":26},"isFipsImage",false,"hasFipsVersion",true,"isHardened","cis",{"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":-5},"nist",{"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_23":24},"timestampTag","9.4.2-202606211614","stigScore","","stats",{"_57":58,"_59":60,"_61":60,"_62":58},"scanTime","2026-06-21T16:34:58.801086Z","checkResults",[37,38,39,40,41],"score","100%","benchmarkName","NIST SP 800-190",{"_42":43,"_35":36,"_44":55,"_46":56,"_48":17},{"_42":43,"_35":36,"_44":53,"_46":54,"_48":17},{"_42":43,"_35":36,"_44":51,"_46":52,"_48":17},{"_42":43,"_35":36,"_44":49,"_46":50,"_48":17},{"_42":43,"_35":36,"_44":45,"_46":47,"_48":17},"benchmarkType","NIST_SP_800_190","id","3.1.5","description","Use of untrusted images","result","3.1.4","Embedded clear text secrets","3.1.3","Embedded malware","3.1.2","Image configuration defects","3.1.1","Image vulnerabilities","passed",5,"failed",0,"irrelevant","analyzed","docker",{"_27":70,"_29":30,"_31":71,"_33":34,"_35":72,"_23":24},"mongo","postgres","nginx","cassandra","mariadb",{"_57":111,"_59":60,"_61":112,"_62":111},[73,74,75,76,77,78,79,80,81,82,83,84],"CIS Docker Benchmark v1.8.0",{"_42":85,"_35":72,"_44":109,"_46":110,"_48":17},{"_42":85,"_35":72,"_44":107,"_46":108,"_48":17},{"_42":85,"_35":72,"_44":105,"_46":106,"_48":17},{"_42":85,"_35":72,"_44":103,"_46":104,"_48":17},{"_42":85,"_35":72,"_44":101,"_46":102},{"_42":85,"_35":72,"_44":99,"_46":100},{"_42":85,"_35":72,"_44":97,"_46":98,"_48":17},{"_42":85,"_35":72,"_44":94,"_46":95,"_48":17,"_96":26},{"_42":85,"_35":72,"_44":92,"_46":93,"_48":17},{"_42":85,"_35":72,"_44":90,"_46":91,"_48":17},{"_42":85,"_35":72,"_44":88,"_46":89,"_48":17},{"_42":85,"_35":72,"_44":86,"_46":87,"_48":17},"CIS_DOCKER","4.12","Ensure all signed artifacts are validated","4.11","Ensure only verified packages are installed","4.10","Ensure secrets are not stored in Dockerfiles","4.9","Ensure that COPY is used instead of ADD in Dockerfiles","4.8","Ensure setuid and setgid permissions are removed","info","4.7","Ensure update instructions are not used alone in the Dockerfile","4.6","Ensure that HEALTHCHECK instructions have been added to container images","4.5","Ensure Content trust for Docker is Enabled","4.4","Ensure images are scanned and rebuilt to include security patches","4.3","Ensure that unnecessary packages are not installed in the container","4.2","Ensure that containers use only trusted base images","4.1","Ensure that a user for the container has been created",10,2,"image",{"_44":163,"_122":132,"_129":164,"_165":166,"_125":167,"_127":168,"_169":15,"_170":15,"_171":172,"_173":174,"_175":176},"pullCounter","registryURL","reg.mini.dev","token","relatedCharts",[121],{"_44":112,"_122":123,"_46":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136},"name","eck-stack","Elastic Stack managed by the ECK Operator ","createdAt","2025-08-17T12:05:49.31374Z","updatedAt","2026-06-23T12:24:38.692924Z","labels",[161,162],"icon","elasticsearch","latestVersion",{"_44":148,"_149":112,"_150":151,"_152":153,"_125":154,"_127":128,"_155":156,"_157":158,"_159":160},"images",[137,138,139],{"_44":147,"_141":60,"_113":132,"_143":144},{"_44":145,"_141":60,"_113":146,"_143":144},{"_44":140,"_141":60,"_113":142,"_143":144},701,"helmChartVersionID","logstash","tag","9.2.4",700,"kibana",699,80,"helmChartID","version","0.18.0","appVersion","3.2.0","2026-01-25T13:01:47.305651Z","overview","

\n\nDeploy the full Elastic Stack (Elasticsearch, Kibana, etc.) as Kubernetes custom resources managed by the ECK Operator (Elastic Cloud on Kubernetes Operator).\nYou can customize the stack using the `values.yaml` file to set the number of nodes, resource limits, TLS, etc.\n\n \n## {{icon-list-search}} Prerequisites\n\n- A subscription to the Minimus images included in the chart\n- ECK Operator installed and running in your cluster\n- Helm (v3.8 or newer for OCI registry support) ([Installation instructions](https://helm.sh/docs/intro/install/))\n- Kubernetes v1.21 or newer ([Installation instructions](https://kubernetes.io/releases/download/))\n- kubectl ([Installation instructions](https://kubernetes.io/docs/tasks/tools/))\n- Network policies and storage configured as needed\n\n

\n\n---\n\n

\n \n## {{icon-rocket}}Try It Out\n\n

\n\n### Step 1: Start Cluster\n\n

\n\n\nIf you have a cluster to work with, skip this step. Otherwise, start a Minikube cluster. [Deployment instructions](https://minikube.sigs.k8s.io/docs/start/?arch=%2Flinux%2Fx86-64%2Fstable%2Fbinary+download)\n\n

\n\n### Step 2: Create Namespace\n\n

\n\nCreate a namespace:\n\n```\nkubectl create ns elastic\n```\n\n{{if-enterprise}}\n\nNext, create a Kubernetes secret for the Minimus token:\n\n```\nkubectl create secret docker-registry minimus-registry \\\n --docker-server=reg.mini.dev \\\n --docker-username=minimus \\\n --docker-password={{pull-token}} \\\n --namespace=elastic\n```\n\n{{/if-enterprise}}\n\n

\n \n### Step 3: Save Values File Locally \n\n

\n\nGo to the Values tab and save a copy of the it locally. You will need to add the flag `-f values.yaml` to override the defaults when you deploy the chart in the next step.\n\n

\n\n### Step 4: Deploy ECK Stack \n\n

\n\nDeploy the Helm chart with the default `values.yaml` provided by Minimus. This chart deploys CRDs like Elasticsearch, Kibana, ApmServer, etc. that are managed by the ECK operator, not raw pods: \n\n```\nhelm install eck-stack {{oci-url}} \\\n --version {{chart-version}} \\\n -f values.yaml \\\n -n elastic\n```\n\n\n

\n\n### Step 5: Check the Resources\n\n

\n\nAfter installation, verify your ECK-managed resources:\n\n```\nkubectl get elasticsearch,kibana,apmserver -n elastic\n```\n\n

\n\n### Step 6: Monitor Pod Status\n\n

\n\nRun the following and wait for the pods to show that their status is `running`.\n\n```\nkubectl get pods -n elastic -w\n```\n\n

\n\n### Step 7: Access Credentials\n\n

\n\nRetrieve the default elastic user password:\n\n```\nkubectl get secret eck-stack-es-elastic-user -n elastic -o go-template='{{.data.elastic | base64decode}}'\n```\n\n

\n\n### Step 8: Port Forward Kibana\n\n

\n\n```\nkubectl port-forward service/eck-stack-kb-http 5601 -n elastic\n```\n\nThen open `http://localhost:5601` in your browser and log in using:\n\n* Username: elastic\n* Password: {from previous step}\n\n\n

\n\n\n---\n\n

\n\n## {{icon-info-circle}}Terms & Info\n\n

\n\n### Trademark\n\n

\n\nThis catalog is published by Minimus. All product names, logos, and marks, other than those belonging to Minimus, shown are owned by their respective rights holders and appear here only to identify the open source software each image contains. Minimus claims no ownership of those marks and implies no affiliation with, endorsement by, certification by, or sponsorship by any rights holder.\n\n\n{{if-anonymous}} \n\n

\n\n### Disclaimer\n\n

\n\n\nImages are provided \"as-is\" without warranty of any kind. \"Hardened\" refers to the security configuration applied at the time of build and does not constitute a guarantee of ongoing security or absence of vulnerabilities. The free tier is provided without support, SLA, or guaranteed patching timelines. Security updates may be applied to paid subscriptions before or instead of free tier images. By pulling or using any image you agree to our [Terms of Use](https://www.minimus.io/terms-of-use).\n\n{{/if-anonymous}}\n\n\n

","ociDigest","sha256:ea35720f710e4b32cfff5d1a6fde3a7dfde40e241a60ec4cbb057231ce94db15","tarballDigest","sha256:1a33c317235d46520586c3f2ab9d12c6e83100afe8e73ba80ef933f33ef04052","apps","data",29,[161],"thirdPartyImageName","elasticsearch:9.4.2","2025-04-16T11:09:02.826005Z","2026-06-21T16:46:56.953935Z","private","isCustom","groups",[146,142],"minimusVulnsCount",7,"thirdPartyVulnsCount",99,"webappURL","https://images.minimus.io","docsURL","https://docs.minimus.io/","docsMap",{"_187":188,"_189":190,"_191":26,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":26,"_203":26,"_204":26,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":26,"_220":26,"_221":26,"_222":26,"_223":26,"_224":26,"_225":26,"_226":26,"_227":26,"_228":26,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":26,"_240":241,"_242":26,"_243":26,"_244":26,"_245":26,"_246":247,"_248":26,"_249":250,"_251":252,"_253":254,"_255":254,"_256":257,"_258":26,"_259":26,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269},"user","isAnonymous","isTokensExpired","license","/","https://docs.minimus.io","/actions","https://docs.minimus.io/remediate/actions","/actions/?","/actions/create","https://docs.minimus.io/remediate/create-action","/advisories","https://docs.minimus.io/remediate/advisories","/advisories/?","https://docs.minimus.io/remediate/cve-advisory","/advisories/?/exploitability","https://docs.minimus.io/remediate/threat-intel#threat-intel","/advisories/?/packages","https://docs.minimus.io/remediate/cve-advisory#status-history","/advisories/?/packages/?","/advisories/?/references","/advisories/?/severity","/charts","https://docs.minimus.io/foundations/helm-charts","/creator/list","https://docs.minimus.io/advanced-tooling/image-creator","/creator/files","https://docs.minimus.io/advanced-tooling/file-bundles","/supply-chain-protection","https://docs.minimus.io/advanced-tooling/supply-chain","/gallery","https://docs.minimus.io/gallery","/gallery/images/?","https://docs.minimus.io/foundations/image-card","/gallery/images/?/changelog","https://docs.minimus.io/foundations/image-card#changelog","/gallery/images/?/changelog/?","/gallery/images/?/changelog/?/versions/?/?","/gallery/images/?/changelog/?/versions/?/?/exploitability","/gallery/images/?/changelog/?/versions/?/?/packages","/gallery/images/?/changelog/?/versions/?/?/packages/?","/gallery/images/?/changelog/?/versions/?/?/references","/gallery/images/?/changelog/?/versions/?/?/severity","/gallery/images/?/changelog/?/versions/?/digest-history","/gallery/images/?/lines","/gallery/images/?/lines/?","/gallery/images/?/lines/?/versions/?","https://docs.minimus.io/foundations/image-version","/gallery/images/?/lines/?/versions/?/digest-history","https://docs.minimus.io/foundations/image-version#digest-history","/gallery/images/?/lines/?/versions/?/sbom","https://docs.minimus.io/foundations/image-version#sbom","/gallery/images/?/lines/?/versions/?/specification","https://docs.minimus.io/foundations/image-version#specification","/gallery/images/?/lines/?/versions/?/vulnerabilities","https://docs.minimus.io/foundations/image-version#vulnerabilities","/gallery/images/?/quick-start","/gallery/images/?/risk-reduction","https://docs.minimus.io/foundations/image-card#risk-reduction","/gallery/images/?/risk-reduction/?","/gallery/images/?/risk-reduction/?/exploitability","/gallery/images/?/risk-reduction/?/references","/gallery/images/?/risk-reduction/?/severity","/gallery/images/?/compliance/cis","https://docs.minimus.io/foundations/image-card#compliance","/manage","/manage/self-hosting","https://docs.minimus.io/manage/self-hosted-registry","/manage/subscription","https://docs.minimus.io/introduction/subscription","/manage/logs/activity-log","https://docs.minimus.io/manage/activity-log","/manage/logs/audit-log","/manage/tokens","https://docs.minimus.io/manage/token","/manage/tokens/create","/manage/tokens/delete/?","/manage/access/users","https://docs.minimus.io/manage/users","/manage/access/users/create","https://docs.minimus.io/manage/users#add-users","/manage/access/users/saml","https://docs.minimus.io/sso/saml","/manage/access/groups","https://docs.minimus.io/manage/user-groups","/manage/minicli","https://docs.minimus.io/advanced-tooling/minicli","toast","gtmID","GTM-56RQNQ3D","hubspotID","42541238"]

Switch to a FIPS validated image with ease!

This page is available on desktop