Sign inSign up

cleanstart/kong

Verified Publisher

By CleanStart

•Updated about 3 hours ago

Secure by Design, Built for Speed, Hardened Container Images on a minimal base CleanStart OS.

Image
API management
0

50K+

cleanstart/kong repository overview

Verified KONG Container Image

A hardened, minimal KONG container image built from source with verifiable software provenance and an SBOM, designed for secure production deployments.

For additional versions including FIPS support, explore CleanStart Images — secure, hardened container images⁠

⁠Pull Latest Image

Download the container image from the registry

docker pull cleanstart/kong:latest
docker pull cleanstart/kong:latest-dev

⁠Basic Run

Run the container with basic configuration

docker run --name kong \
  -e KONG_DATABASE=off \
  -e KONG_PROXY_ACCESS_LOG=/dev/stdout \
  -e KONG_ADMIN_ACCESS_LOG=/dev/stdout \
  -e KONG_PROXY_ERROR_LOG=/dev/stderr \
  -e KONG_ADMIN_ERROR_LOG=/dev/stderr \
  -e KONG_ADMIN_LISTEN=0.0.0.0:8001 \
  -p 8000:8000 -p 8443:8443 -p 8001:8001 \
  cleanstart/kong:latest

⁠Production Deployment

Deploy with production security settings

docker run -d --name kong-prod \
  --security-opt=no-new-privileges \
  --restart unless-stopped \
  -e KONG_DATABASE=off \
  -e KONG_PROXY_ACCESS_LOG=/dev/stdout \
  -e KONG_ADMIN_ACCESS_LOG=/dev/stdout \
  -e KONG_PROXY_ERROR_LOG=/dev/stderr \
  -e KONG_ADMIN_ERROR_LOG=/dev/stderr \
  -e KONG_ADMIN_LISTEN=0.0.0.0:8001 \
  -p 8000:8000 -p 8443:8443 \
  cleanstart/kong:latest

Create kong.yml file

mkdir -p ~/kong-config
cat > ~/kong-config/kong.yml <<'EOF'
_format_version: "3.0"
services:
- name: example-service
  url: http://httpbin.org
  routes:
  - name: example-route
    paths:
    - /example
EOF

Volume Mount Mount local directory for persistent data

docker run --name kong-config \
  -e KONG_DATABASE=off \
  -e KONG_DECLARATIVE_CONFIG=/kong/declarative/kong.yml \
  -e KONG_ADMIN_LISTEN=0.0.0.0:8001 \
  -v ~/kong-config:/kong/declarative \
  -p 8010:8000 -p 8011:8001 \
  cleanstart/kong:latest

Port Forwarding Run with custom port mappings

docker run --name kong-ports \
  -e KONG_DATABASE=off \
  -e KONG_ADMIN_LISTEN=0.0.0.0:8001 \
  -p 9000:8000 -p 9001:8001 \
  cleanstart/kong:latest

Why Use CleanStart Images⁠

  • Verified — Built from source with verifiable software provenance
  • Hardened — Minimal software footprint designed for secure deployment
  • Transparent — SBOM available for visibility into image contents
  • Production-ready — Built for modern container environments

Tag summary

Content type

Image

Digest

sha256:7fe0f135d…

Size

87.9 MB

Last updated

about 4 hours ago

docker pull cleanstart/kong