Olympus Kubernetes Engine, also known as OKE, is Zaden’s NSA hardened next-generation Kubernetes distribution. It is a fully compliant Kubernetes distribution that focuses on security and compliance within the U.S. Federal Government sector. To meet these goals, OKE does the following: Provides defaults and configuration options that allow clusters to pass the CIS Kubernetes Benchmark v1.6 or v1.23 with minimal operator intervention Uses images and hardening guidelines based on the NSA and CISA Kubernetes Hardening Guide Enables FIPS 140-2 compliance Regularly scans components for CVEs using trivy, sfyt, grype, and openscap in our build pipeline

OKE subscription is $200K per year. However, If you have an active Olympus Premium and Enterprise subscription then OKE subscription fees are waived.