This image is one of two required for creating an encrypted overlay for Kubernetes under UCP. It applies IPSec encryption configurations to IPIP tunnels in the host network namespace of a particular cluster node. It creates the configurations from a key ring managed as a Kubernetes secret. The second image (ucp-secureoverlay-mgr) is responsible for creating and rotating the keys in the key ring.